last executing test programs:

14.362462212s ago: executing program 3 (id=3780):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x10, 0x7d, 0x20f})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
splice(r5, 0x0, r6, 0x0, 0x7c1c, 0x8)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002cc0)=@newtfilter={0x15e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x15a8, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_ACT={0x159c, 0x9, 0x0, 0x1, [@m_ctinfo={0x74, 0x11, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x6, 0x6, 0x400, 0x5c2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8ee}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x452}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xd, 0x6, "a7cf4927a8e1ff6ee1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x144, 0xf, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf4, 0x13, 0x5, 0x3, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x6, 0x4, 0x6084}, {0x9, 0x2, 0x17, 0x7}, {0x9, 0x1, 0x2, 0x6}, {0x1ff, 0x7, 0x80, 0x4}, {0xf, 0x8, 0x40, 0x80}, {0x200, 0xa, 0xfa, 0xfffffff8}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0xe0, 0x5, 0x5}, {0x10, 0x3, 0xfa, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x8, 0x20000000, 0x6, 0x3}}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}]}, {0x8f, 0x6, "0039550fe559e502771b65a1282d80c303dc3563afa1d345749fe7b010fd125b47a5e588605539566ef413c07524f9ce6893f102e947991cdfe3e81c2242cb5c5d57774506eb2b0a5f250395cfd739084bb3d9b043d586de4b122f4567841eb2e121059e3a994ce24175d6ed7615b1fb719b872f32ac9a0e7b94f4add3509f2527b86033bcbe85f913bc01"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x10c, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}]}, {0xd8, 0x6, "33eb4f7c3f16ff06733d23a7fa1f7228b59040f6117b5cb83fb77bd9901aa645428792dcea6c135ac1cbbfbba62fe6312f1ce3e4a3c86db040e442cf98224dab60dc59f110c2f7dbfb03628dd1c0420e83279b620454efb6f526d9d925a573a6abe1069d8777ae515234bd039eb64fa6881e46ec70c9c74f32057e457ca090bc5182e66b933099dfe58653d86273f45d2bc4ad0b82b2449bcf1258400f1544464c0dd2cf2383dbaee2c93d8c4679ed0aeb14971c22bd625287741dc4ad915f36c499821e587e5a6410c7941b998112b04a9d6fc8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0xbc, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x20000000, 0x5, 0xa84a}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x69, 0x6, "59ac6a8237ba166c9ee1eba5a3fd7ede081f3ea68ec7f518751c8cdc9cd91ecd6b19e2c6bee877185b04594578326fd155d448a3df307374c509acd35043f9c44ab233112f3e241b9c5a02f3f51e1a30510ee7a5e83f7e38cb89caf4c7151c8aac87b0e7b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x98, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x40}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7770}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xda}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x31, 0x6, "ae380b23b2d72255d5201c8b506faf01b1d8ae773427f8ebc46cc77309840bbc75433245870c071c858a4f3f84"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x103c, 0x1a, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8}]}, {0x1004, 0x6, "c46fc70b929fcfc297cf24796df30da5cac40c34a8e383089c7f8fab1a5a02bc5383501247a171508ee875716e09fc7d5185ed2ee677e083b3bde77e785370fbaf79e3fcca6c9b7dc6642c7bd930924586e1bc05568534dcd8ea9040fe5a6e5cf9adb7edcb3b3d8bd459bfddb0b6e148271091add6016fc554d7a97b8043ea7a2dea9a76ac74654ad3bd3e2d33a103f4f8c49e3f2c1bd6907c1585f77c4f7ebe712cbd3e7914af70955d6b9a65b678724f068eb0933456844d6cd67be124d0a1b3a6894a2b68f6c1509c1c84c24ca2172fec84975d182f64c2ae48675b9732ca1ab284907fdc7ec9f6ac5be92ac6ca0d5329ad0c751d9042acc418cdb5d283bcf305b0668866f8c2157c1a9cb4e5acb21abbd3f8cb475609b3d603a42949ad8f17e06b3b8aa4626387a5ddfa9e3f9aa33b4a0d9431f03e358c1083ceccf941d11796acfcbbeb4e4e8fcdd463fbeba80e6de6c3e0ed5c90f6dc36264c383b01920707578d581ffd98cf2a02f74d9c92c25bfd0db376db4aed35bdfdd41218ebdb89ce4521d643c1f00a7b821df5b69d20ffc09990091dfec55a2feaec653ec5b6cc1b1a735f48a726ff2c1637cf2bc6b2e6691782ab4187b9f4a11ae1de97fc007f5722143be374dbfb5ecc047623cbdd14bb664ffd47aac3de8c3d88dfca37a9fd70b97770055961fc8f0d80e7b6aaf4e245e2819a7b2eb4dbe65fe08bdbac24de8432745b2de670edec58b5e9ea39760e37a32fe7038a44340f3513e1edd6bbd14f29b42be858479da58b142ce2265177e4a37dec175af7b0a48f260b35615a23c261d57edf61d0113dafaa03c35e97751cf4b4d106d99cd5f6ec4525f0906c7e34f2567fbc1e28c601b0934046e0cc57133b0070db2799185fd61d514f58e545ac105455e82cd9d6ab2e6bdd0e963d6177fd2b98b6c674adf2f9fb7165b24d9ae3bc64fca49bc52a87aac31cf8834c98882070f894258010906c15913e87bf5f9e57e3bde8cd5c13b47fca97bfdf23101005f815aaa9c8b2a5d94d48619df8c8ae3212c363927d811dba7029e3bf306e9bb0e5934695d67782878ad065751b209f835c964aecc4124681c497034efc2a6c34c6a8b2b234dcc36739dab98bed1d9781ce97ddc5dbe05193f760830406a856e786cd5b4d1bf5e60ce6ac5eac4004fc7422596be150a40c8ebaecd642b484d1ced6f20f210d942a0a647d867f519d25827d1bcac8ef19ef92a12ad1a3ab27512dbd9ed6c6d2fecaa5dadcedd6f8acc34fc6a4d23fae3ff55a745cecf3933053414244931db8ea5979fa651ee0aed30d73b817e70556428256f5e6197420335ec3aac08d9a78fb50d4e2ff1e8a8b53ef157890f62df5aa1387b9b12400e2bd6d51cdbf08d50319108891e3839a69f25531db3cd79bb44335c2ce03e5829db9613f3c30c229edac6b0920afef998b4b890e102e3b6d94028eba56b596175c8438222e9d1e03e0652c285f5c9304ce534c806faa1c8dad92a9c8de5ca597a0a883e77e1641a1a4671ed973c1982d027761ce578b27bc49ab0366f49d56538e85e77e0e9e8820bd3704ec199598fa2038b6452a04d87f0ef9eddff44fb6fd8d8941556981a60efdff4e03738e018d75fa500659a6f71d63778aded2bc033f4edc50403cdefecaf053ce1b65aabe4617569128bf21a6642ff599047cbec4b655cac8c145bef184da4c2ec77be57785f25526b44366dfb56179ace41429dfeae29f8fef8554b88f45548030d808090a468fcec1a6b6ebe2acae487c669f7ac0fbe1ef81ca92034b48a63d303434b6331d8176c63ce0cc875375562f2618323b31136bf907a453bb7e246ea34b953c5677fadb1be0176b7a1794e4f7c01e3cb714df5945961a53e540536cf6103ffa9e5f4fdb96abe2a9bf23c1228e035781c89b9d2747619e20fd34cc328d36591372742e094314588a4c3204b8c9841de494258c6d7deedcb60c5cd26126baaddba41b250a0fec474681ef4f924663f7930835cbe1d7d4b4f312124984718b316843434a51739aa7bf4f6efce289073bec73cae824671acf43b3f95900fd81023d16547b4d45dd1087e09dc9ded0f24d8922ac4482e452192cb1b42b1f86c00100d897a5ee5594589467cf3aaff58dc4fc9d3a99d010063ad3a4cc052743e2848028940955a899b298598dcbfc32174da8d6677b452086c97b4483a349392e45a3be8f2128e48afdd1496692ac275570951f14e44ba9dbe9ed6e94281d76db43b9a5a96a1135816db5072875163bfaf6c29857c18e17c76d0b966c8ecb423df3f00c1324ac38759d0cb500c3868942cd716ff6ac5138e1325c6bb15f2c18251721b2e8710ddc270a69639f059b40835f457b4d9e0d89262ee9ebe90d280608fb24957f96993862fc713dbe15b0780fe284f6c92ac9601223c77d8772e9fb1ea0360dac812e4f6bf34f51ade639f44c3800cb9f95d0b6c6831e85dfeccc525ef3dafe1dfd4bdb8a493790283f0af142c3404eb5e7e62a33932284ba9e55149f4c0b13f3ccc29032ac9e02996509a301a73bd5f35ccb9a668a3672a5bc9378188fd29b2b8d308887667fdcbe2f875d630e2f855d1f10ae38428d169ee6c384305f7adcaee3a6f25fc6cb991cdca583165504b58698ebdbc884b8feae66a64a70b129df19cd87caf893f45e0cc3bef25b702f221f7f1eb3dcc9598ada6e67d21e7f24e969d2c8314f4cad73009656ec3761cf359142b7a3f77bf0aab70cfcab807efea4ca2835b86bcfed0cac0b9b2b5d89c4bf32a7defbd783f9a60af0a3e7d12254f825d26edeb89c6ffa81403b6d1803355b9a19fe1c2b2100ab240f0cf3a227dc1bf1a9a5bcfe0d040ed472323049f2fb0fc9fed41f907e5c49daacb09522ab078499065b81d1f3e291809c275d508cbfd5fb1833dd5f7560975c9a628ba63fbd8f5040a2a8aaee6bd43c848d85c5a1b27fdfad7183a2b3173308ddb6485e64e6c62b4b74a406cca95c514ddc50492cfcb4767ef4ac2c336a979f43208808967e98bedc40858e60dd46c9ab98bd971887905b5eed0e9474d8770255fdec37fe2ebe444763a8b1ad13bf1c8696bc42b39e39ceb57ba31a3dba419c1d0d312ff107789fa2773910ac82181fcd47f7a2421655665940fc257666599b784ed91e4e95d7e4dfdf5499e339fa699079e5b543924ba5760a4f1115082159ad58618539b61dcda7f626279585a0b0bf4f9053e7a229bafe32cbebe7f8ee1bfd793a2b6d877ba66337371c01bc1a5f8a25bf78a7a2d0ae62666da499706a046a9846fe86996b5729679fd0aec70e7d958eaec3a60b5c2420f7692bc9744bc008d6ec799f9fcf7c2b89fccdd9443f7312cff80c9fb29bae1175a738295063faa6627c9c543ff080380e2658cb3504fca9e7222f436b72f58977a70fc5d283035d23b04c6ab4b21e8be77474135197a78ab260fa67848bdd55f69cea3ec4b1a6df0bc71cbc904d1c74a8db6ae6d6d61e41a1238733a78d118b7e3fbec9ab307fc517b7a8cc222f23ee2339901ad5731c596aa94a4d71b4570292bc1df26d1369d1639765da2cfb1d6da85a9bbe8908b8b0998fc2546f475f854aeda1173f3dacad6bcf0e518c6d52efb69e9bd8f4a5f9b728d7c3ef2dba23845e0fba16a7c60a0372f6e2cd9fc7a21d411f0a1393f1aa40d8b04933e23385564693c1d15aec1d8a8930d69fc2fc06c9ddf67630d748bdf23920de75af69ce514b1a7b29231eec23a7f2a413234ca20993479a1abbd1002104b2085c2a3b09b4156e9cb962929e5f348e61ecd3bcb3973222967a9a0e0790e2e851fee99360900e8a288c4759755dd211c4e12eafd752fafc69949b15ff833055f3187106cb1021d50ed57d761a3fc9aab905cc656a52100d9f9c1075dc1783afd02f5d7d8e11fcb7ad6991d7c81a45a1a8790cb6fcbbab446a31b28a9aff8da54b0313fab19911c29755002526c5e2c981c9cd0fead7be5b9a24305e0af4a40e1224a7f2c692ecdc1402328f1d4891472658c7129903d9f8f2f410115784e8273a7418453dad6c52341235ed9e02a15deaff51afdb7c7c6d2846710aac6d1add1879c97cfb3995c9de6f1ef245372d648e65f055cc0588671b374483a911e3209946e4d2af087737e10b84bf3b98670339a2c882657053e61d64c7e0282d0ef7346d49f7dcaa005eeb0ac55a17de7c5b88f1ce66bfea8ddc636dccba6b4556dfb0777ddcc14df93226baf796bc61ffcdaa3309f23eda3779a044da7a1f0161f8ed2477c1efe1fa20d2721f13d2ffc8cf1984e27c09768671cbfe0139627a7a40092c05ea0bf25796832ee2596aa6c7aa62db50306f5a747ca96e2c1f67c8e869fd2857de9a69177c244655af2422ab4cda3454cbe0eacc7df6ea754fe887f1db95970d1f142cc0f7ea600779e2ba1c4d01677036b2e5070710be1bed9e379264b25a47b13426691d8467831db7173d282fa4e61b6bb2d731a2d21418aa6e0ef054bc1f14da2b15437dc3fd4f861b08c6ed390d86eff028814b75fc2f001349b1371bd64dd8ab0314b77750e46ab15ee497f76a50c1baa1778fc353834d50ff5bd0385a9cb80a040805878cb8de1337faf2d4c31fe65494944de18bf8b8c114072ad56f12a75448d43203d679da538fc3e5c1e02a592203909b6c8127a4b4e81ace0218420c1800affd12587697348c3f2237dbdc3c05efc02a1f44e2dc9bfbbbc3d4e21c41902f835127e4465e3072a26fc98ec131ab76b71834bb31c6a7d17c7c38b1e2dddda179e688c13e692e299954a24d0adac0702a289deba17970606751156221cfc4a89f5d11e441b38001132d80693189f2810441b5c68e115c254f4cd796adae588eec34d46231603bb634491cceb918b32307378dd555d36f43433a057e4b345b425d9380629a32a17134b088cbb1c954182c5b2882fc51848e765d6073658957837fe6adb699ba7ab58dc0c18d26a24171203f490a35cac233d140d7a673285e8b769fd2a1c79120c44ea9f257d483fb3a6638fae3fea6e84bc4302fb9bdd55a80ef9b61c799062110710b9d69d72d99f4641ccacdc3bbed133cb69f149c293637167a21b50044db69a6eeccc621f6790ad0c72ca10448c02960c7e68b7da32bcb482938488e308f77eb015eb4ba59634e6d78e7c123b8e46f32c6598d59fd3156f4580bf65548401ac243a246d17c4440510e89304b099be9fe3b855f049aa06fa64a9664ebb0bda90083a0a276977ad584d6aa244bb852164ccc563be3e5d8aa0e673f06b70fefbd45aaaa3b31313c63531bae6e00d2c405248ef83affd833729d94df4639148eacbd1b447cdf1760892552fac66008c96b0a4ae0d66852b784eee43d989051d388200a4e5d966350dfd7eb9c01a1dbdbd1fb6a80402f7f8610f1dd89de4db005cce2bb9b7f7a7877d10fb2efe414ea057ce0a9663921e231a1f9eca883abd6f3e806117abffaf0becb84f8061a6dc258e3937b5dde6d753f4d3dd49da57b57d7840e21a811e5a0a6bc66b5ab60ec4219a946ee1aa1c1d35a124c7fd15e585845249169a136c95eedf280139cedd3f143fbdd9626be8762abc79179f3d08f7c7b3e58c8c94790af105788da06c82b938239253935837f5439f4bc0c98e88e79e2ec6bee1a6115a35602d3ab53e180286f570e5a0ccc0bf5dadcc06400f02181d4d833a4f729c3f25938b3525a6e57963adef995b1f22a38a54dbdfab42c269bbefdb426189aee1c75bfbc7bb9936cff9516c226899a92f2a6ad73584e3733434d0f828435310a83"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xdc, 0x7, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x200}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5b08}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc3b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x809}]}, {0x7d, 0x6, "72e814b2c57b735e46f94a5bdea2a829c042319bb0a1dd484f352cea4a954bf9bd6ad214b804fbc46362ff824ab7461e143f3b619a372889a40d2a23681fffe579b20ac90b61fc7fc6c78427fc8271a25cbcdac16c61bacbce55f9c921c64f0af848719e7abe34093df535474b60999abf7efc976fbf0f1869"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x68, 0x10, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "aa502c63964eefd3b4fdad5138e79077"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0xffffffffffffffff, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x600)

12.657908471s ago: executing program 3 (id=3787):
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier')
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x18, 0x8000e, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x333027b216d241e0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[0x0, 0x0]}, &(0x7f0000000b80)={[0x0]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}]}, 0x34}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x1)

11.283366711s ago: executing program 3 (id=3789):
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9)
connect$unix(r2, &(0x7f00000001c0)=@file={0x1, '.\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x4a003, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8})
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0xa)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r12, @ANYBLOB="2a2199b3424694350a35f9f0f692e1c51195038d1e0f5a1d9b1d2be9d8b88e2a29ef41b8355f232dc410123aeb9ee5ef"], 0x3c}}, 0x0)

9.355626712s ago: executing program 3 (id=3791):
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x10001, 0x2)
ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0x4, 0x2, 0xb7, 0x1, 0x5, 0x10000})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3, <r4=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r3, r4, 0x3, 0x500, 0xf8, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x8, 0x1, 0xc3f3, 0xfffffd, 0x918, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r6, 0x400, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000cc0)={&(0x7f0000000440), &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000040)=[0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0], &(0x7f0000000300), 0x6, 0xa})
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000940)={0x1, 0x0, &(0x7f0000000900)=[<r10=>0x0]})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r9, 0xc02064a4, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000001340)={0x501, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x7], &(0x7f0000000d40)=[0x0, 0x0, r7, 0x0, 0x0, r8, r10, 0x0], &(0x7f0000001300)=[0x2, 0xfac, 0x100000001, 0x9, 0x5, 0xfff], 0x0, 0xfe})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, <r11=>r4, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r10, r3, r11, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400))

8.914586266s ago: executing program 0 (id=3793):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)

7.729138516s ago: executing program 1 (id=3797):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x10, 0x7d, 0x20f})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
splice(r5, 0x0, r6, 0x0, 0x7c1c, 0x8)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002cc0)=@newtfilter={0x15e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x15a8, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_ACT={0x159c, 0x9, 0x0, 0x1, [@m_ctinfo={0x74, 0x11, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x6, 0x6, 0x400, 0x5c2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8ee}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x452}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xd, 0x6, "a7cf4927a8e1ff6ee1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x144, 0xf, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf4, 0x13, 0x5, 0x3, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x6, 0x4, 0x6084}, {0x9, 0x2, 0x17, 0x7}, {0x9, 0x1, 0x2, 0x6}, {0x1ff, 0x7, 0x80, 0x4}, {0xf, 0x8, 0x40, 0x80}, {0x200, 0xa, 0xfa, 0xfffffff8}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0xe0, 0x5, 0x5}, {0x10, 0x3, 0xfa, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x8, 0x20000000, 0x6, 0x3}}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}]}, {0x8f, 0x6, "0039550fe559e502771b65a1282d80c303dc3563afa1d345749fe7b010fd125b47a5e588605539566ef413c07524f9ce6893f102e947991cdfe3e81c2242cb5c5d57774506eb2b0a5f250395cfd739084bb3d9b043d586de4b122f4567841eb2e121059e3a994ce24175d6ed7615b1fb719b872f32ac9a0e7b94f4add3509f2527b86033bcbe85f913bc01"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x10c, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}]}, {0xd8, 0x6, "33eb4f7c3f16ff06733d23a7fa1f7228b59040f6117b5cb83fb77bd9901aa645428792dcea6c135ac1cbbfbba62fe6312f1ce3e4a3c86db040e442cf98224dab60dc59f110c2f7dbfb03628dd1c0420e83279b620454efb6f526d9d925a573a6abe1069d8777ae515234bd039eb64fa6881e46ec70c9c74f32057e457ca090bc5182e66b933099dfe58653d86273f45d2bc4ad0b82b2449bcf1258400f1544464c0dd2cf2383dbaee2c93d8c4679ed0aeb14971c22bd625287741dc4ad915f36c499821e587e5a6410c7941b998112b04a9d6fc8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0xbc, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x20000000, 0x5, 0xa84a}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x69, 0x6, "59ac6a8237ba166c9ee1eba5a3fd7ede081f3ea68ec7f518751c8cdc9cd91ecd6b19e2c6bee877185b04594578326fd155d448a3df307374c509acd35043f9c44ab233112f3e241b9c5a02f3f51e1a30510ee7a5e83f7e38cb89caf4c7151c8aac87b0e7b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x98, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x40}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7770}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xda}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x31, 0x6, "ae380b23b2d72255d5201c8b506faf01b1d8ae773427f8ebc46cc77309840bbc75433245870c071c858a4f3f84"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x103c, 0x1a, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8}]}, {0x1004, 0x6, "c46fc70b929fcfc297cf24796df30da5cac40c34a8e383089c7f8fab1a5a02bc5383501247a171508ee875716e09fc7d5185ed2ee677e083b3bde77e785370fbaf79e3fcca6c9b7dc6642c7bd930924586e1bc05568534dcd8ea9040fe5a6e5cf9adb7edcb3b3d8bd459bfddb0b6e148271091add6016fc554d7a97b8043ea7a2dea9a76ac74654ad3bd3e2d33a103f4f8c49e3f2c1bd6907c1585f77c4f7ebe712cbd3e7914af70955d6b9a65b678724f068eb0933456844d6cd67be124d0a1b3a6894a2b68f6c1509c1c84c24ca2172fec84975d182f64c2ae48675b9732ca1ab284907fdc7ec9f6ac5be92ac6ca0d5329ad0c751d9042acc418cdb5d283bcf305b0668866f8c2157c1a9cb4e5acb21abbd3f8cb475609b3d603a42949ad8f17e06b3b8aa4626387a5ddfa9e3f9aa33b4a0d9431f03e358c1083ceccf941d11796acfcbbeb4e4e8fcdd463fbeba80e6de6c3e0ed5c90f6dc36264c383b01920707578d581ffd98cf2a02f74d9c92c25bfd0db376db4aed35bdfdd41218ebdb89ce4521d643c1f00a7b821df5b69d20ffc09990091dfec55a2feaec653ec5b6cc1b1a735f48a726ff2c1637cf2bc6b2e6691782ab4187b9f4a11ae1de97fc007f5722143be374dbfb5ecc047623cbdd14bb664ffd47aac3de8c3d88dfca37a9fd70b97770055961fc8f0d80e7b6aaf4e245e2819a7b2eb4dbe65fe08bdbac24de8432745b2de670edec58b5e9ea39760e37a32fe7038a44340f3513e1edd6bbd14f29b42be858479da58b142ce2265177e4a37dec175af7b0a48f260b35615a23c261d57edf61d0113dafaa03c35e97751cf4b4d106d99cd5f6ec4525f0906c7e34f2567fbc1e28c601b0934046e0cc57133b0070db2799185fd61d514f58e545ac105455e82cd9d6ab2e6bdd0e963d6177fd2b98b6c674adf2f9fb7165b24d9ae3bc64fca49bc52a87aac31cf8834c98882070f894258010906c15913e87bf5f9e57e3bde8cd5c13b47fca97bfdf23101005f815aaa9c8b2a5d94d48619df8c8ae3212c363927d811dba7029e3bf306e9bb0e5934695d67782878ad065751b209f835c964aecc4124681c497034efc2a6c34c6a8b2b234dcc36739dab98bed1d9781ce97ddc5dbe05193f760830406a856e786cd5b4d1bf5e60ce6ac5eac4004fc7422596be150a40c8ebaecd642b484d1ced6f20f210d942a0a647d867f519d25827d1bcac8ef19ef92a12ad1a3ab27512dbd9ed6c6d2fecaa5dadcedd6f8acc34fc6a4d23fae3ff55a745cecf3933053414244931db8ea5979fa651ee0aed30d73b817e70556428256f5e6197420335ec3aac08d9a78fb50d4e2ff1e8a8b53ef157890f62df5aa1387b9b12400e2bd6d51cdbf08d50319108891e3839a69f25531db3cd79bb44335c2ce03e5829db9613f3c30c229edac6b0920afef998b4b890e102e3b6d94028eba56b596175c8438222e9d1e03e0652c285f5c9304ce534c806faa1c8dad92a9c8de5ca597a0a883e77e1641a1a4671ed973c1982d027761ce578b27bc49ab0366f49d56538e85e77e0e9e8820bd3704ec199598fa2038b6452a04d87f0ef9eddff44fb6fd8d8941556981a60efdff4e03738e018d75fa500659a6f71d63778aded2bc033f4edc50403cdefecaf053ce1b65aabe4617569128bf21a6642ff599047cbec4b655cac8c145bef184da4c2ec77be57785f25526b44366dfb56179ace41429dfeae29f8fef8554b88f45548030d808090a468fcec1a6b6ebe2acae487c669f7ac0fbe1ef81ca92034b48a63d303434b6331d8176c63ce0cc875375562f2618323b31136bf907a453bb7e246ea34b953c5677fadb1be0176b7a1794e4f7c01e3cb714df5945961a53e540536cf6103ffa9e5f4fdb96abe2a9bf23c1228e035781c89b9d2747619e20fd34cc328d36591372742e094314588a4c3204b8c9841de494258c6d7deedcb60c5cd26126baaddba41b250a0fec474681ef4f924663f7930835cbe1d7d4b4f312124984718b316843434a51739aa7bf4f6efce289073bec73cae824671acf43b3f95900fd81023d16547b4d45dd1087e09dc9ded0f24d8922ac4482e452192cb1b42b1f86c00100d897a5ee5594589467cf3aaff58dc4fc9d3a99d010063ad3a4cc052743e2848028940955a899b298598dcbfc32174da8d6677b452086c97b4483a349392e45a3be8f2128e48afdd1496692ac275570951f14e44ba9dbe9ed6e94281d76db43b9a5a96a1135816db5072875163bfaf6c29857c18e17c76d0b966c8ecb423df3f00c1324ac38759d0cb500c3868942cd716ff6ac5138e1325c6bb15f2c18251721b2e8710ddc270a69639f059b40835f457b4d9e0d89262ee9ebe90d280608fb24957f96993862fc713dbe15b0780fe284f6c92ac9601223c77d8772e9fb1ea0360dac812e4f6bf34f51ade639f44c3800cb9f95d0b6c6831e85dfeccc525ef3dafe1dfd4bdb8a493790283f0af142c3404eb5e7e62a33932284ba9e55149f4c0b13f3ccc29032ac9e02996509a301a73bd5f35ccb9a668a3672a5bc9378188fd29b2b8d308887667fdcbe2f875d630e2f855d1f10ae38428d169ee6c384305f7adcaee3a6f25fc6cb991cdca583165504b58698ebdbc884b8feae66a64a70b129df19cd87caf893f45e0cc3bef25b702f221f7f1eb3dcc9598ada6e67d21e7f24e969d2c8314f4cad73009656ec3761cf359142b7a3f77bf0aab70cfcab807efea4ca2835b86bcfed0cac0b9b2b5d89c4bf32a7defbd783f9a60af0a3e7d12254f825d26edeb89c6ffa81403b6d1803355b9a19fe1c2b2100ab240f0cf3a227dc1bf1a9a5bcfe0d040ed472323049f2fb0fc9fed41f907e5c49daacb09522ab078499065b81d1f3e291809c275d508cbfd5fb1833dd5f7560975c9a628ba63fbd8f5040a2a8aaee6bd43c848d85c5a1b27fdfad7183a2b3173308ddb6485e64e6c62b4b74a406cca95c514ddc50492cfcb4767ef4ac2c336a979f43208808967e98bedc40858e60dd46c9ab98bd971887905b5eed0e9474d8770255fdec37fe2ebe444763a8b1ad13bf1c8696bc42b39e39ceb57ba31a3dba419c1d0d312ff107789fa2773910ac82181fcd47f7a2421655665940fc257666599b784ed91e4e95d7e4dfdf5499e339fa699079e5b543924ba5760a4f1115082159ad58618539b61dcda7f626279585a0b0bf4f9053e7a229bafe32cbebe7f8ee1bfd793a2b6d877ba66337371c01bc1a5f8a25bf78a7a2d0ae62666da499706a046a9846fe86996b5729679fd0aec70e7d958eaec3a60b5c2420f7692bc9744bc008d6ec799f9fcf7c2b89fccdd9443f7312cff80c9fb29bae1175a738295063faa6627c9c543ff080380e2658cb3504fca9e7222f436b72f58977a70fc5d283035d23b04c6ab4b21e8be77474135197a78ab260fa67848bdd55f69cea3ec4b1a6df0bc71cbc904d1c74a8db6ae6d6d61e41a1238733a78d118b7e3fbec9ab307fc517b7a8cc222f23ee2339901ad5731c596aa94a4d71b4570292bc1df26d1369d1639765da2cfb1d6da85a9bbe8908b8b0998fc2546f475f854aeda1173f3dacad6bcf0e518c6d52efb69e9bd8f4a5f9b728d7c3ef2dba23845e0fba16a7c60a0372f6e2cd9fc7a21d411f0a1393f1aa40d8b04933e23385564693c1d15aec1d8a8930d69fc2fc06c9ddf67630d748bdf23920de75af69ce514b1a7b29231eec23a7f2a413234ca20993479a1abbd1002104b2085c2a3b09b4156e9cb962929e5f348e61ecd3bcb3973222967a9a0e0790e2e851fee99360900e8a288c4759755dd211c4e12eafd752fafc69949b15ff833055f3187106cb1021d50ed57d761a3fc9aab905cc656a52100d9f9c1075dc1783afd02f5d7d8e11fcb7ad6991d7c81a45a1a8790cb6fcbbab446a31b28a9aff8da54b0313fab19911c29755002526c5e2c981c9cd0fead7be5b9a24305e0af4a40e1224a7f2c692ecdc1402328f1d4891472658c7129903d9f8f2f410115784e8273a7418453dad6c52341235ed9e02a15deaff51afdb7c7c6d2846710aac6d1add1879c97cfb3995c9de6f1ef245372d648e65f055cc0588671b374483a911e3209946e4d2af087737e10b84bf3b98670339a2c882657053e61d64c7e0282d0ef7346d49f7dcaa005eeb0ac55a17de7c5b88f1ce66bfea8ddc636dccba6b4556dfb0777ddcc14df93226baf796bc61ffcdaa3309f23eda3779a044da7a1f0161f8ed2477c1efe1fa20d2721f13d2ffc8cf1984e27c09768671cbfe0139627a7a40092c05ea0bf25796832ee2596aa6c7aa62db50306f5a747ca96e2c1f67c8e869fd2857de9a69177c244655af2422ab4cda3454cbe0eacc7df6ea754fe887f1db95970d1f142cc0f7ea600779e2ba1c4d01677036b2e5070710be1bed9e379264b25a47b13426691d8467831db7173d282fa4e61b6bb2d731a2d21418aa6e0ef054bc1f14da2b15437dc3fd4f861b08c6ed390d86eff028814b75fc2f001349b1371bd64dd8ab0314b77750e46ab15ee497f76a50c1baa1778fc353834d50ff5bd0385a9cb80a040805878cb8de1337faf2d4c31fe65494944de18bf8b8c114072ad56f12a75448d43203d679da538fc3e5c1e02a592203909b6c8127a4b4e81ace0218420c1800affd12587697348c3f2237dbdc3c05efc02a1f44e2dc9bfbbbc3d4e21c41902f835127e4465e3072a26fc98ec131ab76b71834bb31c6a7d17c7c38b1e2dddda179e688c13e692e299954a24d0adac0702a289deba17970606751156221cfc4a89f5d11e441b38001132d80693189f2810441b5c68e115c254f4cd796adae588eec34d46231603bb634491cceb918b32307378dd555d36f43433a057e4b345b425d9380629a32a17134b088cbb1c954182c5b2882fc51848e765d6073658957837fe6adb699ba7ab58dc0c18d26a24171203f490a35cac233d140d7a673285e8b769fd2a1c79120c44ea9f257d483fb3a6638fae3fea6e84bc4302fb9bdd55a80ef9b61c799062110710b9d69d72d99f4641ccacdc3bbed133cb69f149c293637167a21b50044db69a6eeccc621f6790ad0c72ca10448c02960c7e68b7da32bcb482938488e308f77eb015eb4ba59634e6d78e7c123b8e46f32c6598d59fd3156f4580bf65548401ac243a246d17c4440510e89304b099be9fe3b855f049aa06fa64a9664ebb0bda90083a0a276977ad584d6aa244bb852164ccc563be3e5d8aa0e673f06b70fefbd45aaaa3b31313c63531bae6e00d2c405248ef83affd833729d94df4639148eacbd1b447cdf1760892552fac66008c96b0a4ae0d66852b784eee43d989051d388200a4e5d966350dfd7eb9c01a1dbdbd1fb6a80402f7f8610f1dd89de4db005cce2bb9b7f7a7877d10fb2efe414ea057ce0a9663921e231a1f9eca883abd6f3e806117abffaf0becb84f8061a6dc258e3937b5dde6d753f4d3dd49da57b57d7840e21a811e5a0a6bc66b5ab60ec4219a946ee1aa1c1d35a124c7fd15e585845249169a136c95eedf280139cedd3f143fbdd9626be8762abc79179f3d08f7c7b3e58c8c94790af105788da06c82b938239253935837f5439f4bc0c98e88e79e2ec6bee1a6115a35602d3ab53e180286f570e5a0ccc0bf5dadcc06400f02181d4d833a4f729c3f25938b3525a6e57963adef995b1f22a38a54dbdfab42c269bbefdb426189aee1c75bfbc7bb9936cff9516c226899a92f2a6ad73584e3733434d0f828435310a83"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xdc, 0x7, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x200}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5b08}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc3b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x809}]}, {0x7d, 0x6, "72e814b2c57b735e46f94a5bdea2a829c042319bb0a1dd484f352cea4a954bf9bd6ad214b804fbc46362ff824ab7461e143f3b619a372889a40d2a23681fffe579b20ac90b61fc7fc6c78427fc8271a25cbcdac16c61bacbce55f9c921c64f0af848719e7abe34093df535474b60999abf7efc976fbf0f1869"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x68, 0x10, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "aa502c63964eefd3b4fdad5138e79077"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0xffffffffffffffff, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x600)

7.52333837s ago: executing program 4 (id=3798):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa14"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$binfmt_register(r4, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e})
io_uring_enter(r6, 0x847ba, 0x20000000, 0xe, 0x0, 0x0)
socket(0x2, 0x3, 0x2)
sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x480c4)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0xb8, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x8})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001280)=""/219, 0xdb}], 0x1)
r9 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r9)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)

6.64577788s ago: executing program 1 (id=3799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[], 0x7904}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007911b00000000000851000000200000007000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={<r3=>r2})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x1000000000000221}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r3, r1})
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r1, r1})
mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x5, 0xff})
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
utimes(&(0x7f0000000480)='./cgroup\x00', 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x2, 0x2, 0x5, 0x0})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, &(0x7f00000001c0)='discard')
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsopen(&(0x7f0000000400)='befs\x00', 0x1)

5.773405899s ago: executing program 1 (id=3801):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
syz_io_uring_setup(0x496, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000a2c8571167328ad312800a000100767861616e000000045502800c0080080001006023144d19a1cd69a06d8af7601b88b70a06a75996a694ecd3a4d3a12433986a2acb8f54f0a6b52d0ccbbcd4e728e63115189bbed79f0b827d165a729eb0b833e7020dd4cfd1e69067eca8d9a385fa6baec45cabcbf43411c34f50d76cc9209eb06f0dad9dfc291914bfe569cb432eb25c47bec9862375b606ddb4b5c952878614723f97bab226d1c76b998469317979353d832a763932c2e292", @ANYRES32=r0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x74000000)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100))

4.516727449s ago: executing program 4 (id=3802):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000180)=0x3f)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xc639, 0x1, 0x3}, 0x18, 0x0)
syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a"], 0x0)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x800, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
landlock_restrict_self(r1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0xb, 0xf, 0x39, 0x8, 0x4e6, 0x9, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x2, 0x60, 0x2, [{{0x9, 0x4, 0x55, 0x7, 0x0, 0xdd, 0x56, 0x43}}]}}]}}, 0x0)

4.408135484s ago: executing program 1 (id=3803):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
r0 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
get_robust_list(r0, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0xa, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async, rerun: 32)
r4 = syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
prlimit64(r4, 0x5, 0x0, 0x0) (async)
futex(&(0x7f0000001580), 0x9, 0x0, 0x0, 0x0, 0x1) (async)
fsmount(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, 0x140c, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff)

4.234697884s ago: executing program 3 (id=3804):
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80080)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
write$P9_RGETLOCK(r3, &(0x7f0000000140)={0x23, 0x37, 0x1, {0x1, 0x4, 0x71f, r4, 0x5, '\xaa\xaa\xaa\xaa\xaa'}}, 0x23)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0xc0000102, 0x0, 0x103}]})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000320000000200336"]}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0)

3.828789255s ago: executing program 0 (id=3805):
mq_open(&(0x7f0000000640)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8i\xed`\xe1\xc1\xef\x1b\xc8\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\b\x93\xb4F\x06\xcf\xd3\x8a:\xda\x93\v<\xcb', 0x42, 0x40, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003680), 0x2000, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000003700)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0xb440cb522ef44d76})
r3 = socket(0x2, 0x3, 0x100000001)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000240)=0x8, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
close(0x3)
setsockopt(r3, 0xff, 0x1, 0x0, 0x0)

3.287403125s ago: executing program 1 (id=3806):
r0 = socket$inet6(0xa, 0x80002, 0x88)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000140)={@my=0x1, 0x800})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010325bd7000fcffffff0a"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x4000040)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r0, {0x2}}, './file0\x00'})
getsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000140)=""/234, &(0x7f0000000040)=0xea)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4)

3.284933251s ago: executing program 2 (id=3807):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_emit_ethernet(0x116, &(0x7f0000000c80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0xe0, 0x2f, 0x0, @dev, @mcast2, {[@hopopts={0x2b, 0x5, '\x00', [@generic={0x1, 0xe, "c8e496c7d3619a5495580e8e9a04"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @pad1, @ra={0x5, 0x2, 0x10}]}, @hopopts={0x87, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x4, [0x7]}}, @ra={0x5, 0x2, 0x7}]}, @routing={0x3c, 0x8, 0x2, 0x8, 0x0, [@loopback, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x16, 0x4, 0x2, 0x5, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xba216361aaa0428}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5)

2.520110586s ago: executing program 0 (id=3808):
openat$ppp(0xffffffffffffff9c, 0x0, 0x101940, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)

2.352668634s ago: executing program 1 (id=3809):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0)

2.017001647s ago: executing program 2 (id=3810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r4, 0x4, 0x2800)
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r7, &(0x7f00000005c0)={&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/120, 0x78}], 0x1, &(0x7f00000004c0)=""/220, 0xdc}, 0x0)
sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
sendmsg$inet(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='X'], 0x58}, 0x8080)
mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000100)='cramfs\x00', 0x800, 0x0)

1.776186391s ago: executing program 4 (id=3811):
r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, 0x0)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000140)={0x1, 0x1, 0x8000, 0xffffffff, 0x5, 0xc})

1.517488895s ago: executing program 0 (id=3812):
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0)

1.49945251s ago: executing program 4 (id=3813):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0xe)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x10, 0x7d, 0x20f})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002cc0)=@newtfilter={0x1818, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x17e0, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_ACT={0x17d4, 0x9, 0x0, 0x1, [@m_ctinfo={0x74, 0x11, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x6, 0x6, 0x400, 0x5c2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8ee}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x452}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xd, 0x6, "a7cf4927a8e1ff6ee1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x130, 0xf, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf4, 0x13, 0x5, 0x3, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x6, 0x4, 0x6084}, {0x9, 0x2, 0x17, 0x7}, {0x9, 0x1, 0x2, 0x6}, {0x1ff, 0x7, 0x80, 0x4}, {0xf, 0x8, 0x40, 0x80}, {0x200, 0xa, 0xfa, 0xfffffff8}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0xe0, 0x5, 0x5}, {0x10, 0x3, 0xfa, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x8, 0x20000000, 0x6, 0x3}}]}, {0x8f, 0x6, "0039550fe559e502771b65a1282d80c303dc3563afa1d345749fe7b010fd125b47a5e588605539566ef413c07524f9ce6893f102e947991cdfe3e81c2242cb5c5d57774506eb2b0a5f250395cfd739084bb3d9b043d586de4b122f4567841eb2e121059e3a994ce24175d6ed7615b1fb719b872f32ac9a0e7b94f4add3509f2527b86033bcbe85f913bc01"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x10c, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}]}, {0xd8, 0x6, "33eb4f7c3f16ff06733d23a7fa1f7228b59040f6117b5cb83fb77bd9901aa645428792dcea6c135ac1cbbfbba62fe6312f1ce3e4a3c86db040e442cf98224dab60dc59f110c2f7dbfb03628dd1c0420e83279b620454efb6f526d9d925a573a6abe1069d8777ae515234bd039eb64fa6881e46ec70c9c74f32057e457ca090bc5182e66b933099dfe58653d86273f45d2bc4ad0b82b2449bcf1258400f1544464c0dd2cf2383dbaee2c93d8c4679ed0aeb14971c22bd625287741dc4ad915f36c499821e587e5a6410c7941b998112b04a9d6fc8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0xbc, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x20000000, 0x5, 0xa84a}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x69, 0x6, "59ac6a8237ba166c9ee1eba5a3fd7ede081f3ea68ec7f518751c8cdc9cd91ecd6b19e2c6bee877185b04594578326fd155d448a3df307374c509acd35043f9c44ab233112f3e241b9c5a02f3f51e1a30510ee7a5e83f7e38cb89caf4c7151c8aac87b0e7b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x110, 0x1c, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x80000001, 0x8, 0x3f7bbc82, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x5, 0x9, 0x81}}]}, {0xaa, 0x6, "ba7be4751452326a1f15ef3886dc266eedaeb22d92f021f19136a8ec0dbeb8fe5f28fde83be3ec2a1d17fe635e69a6134918a57343275aaab132d7c16aadbd7f8a6e07cb848c2b3b4d88b56b4cb338068dea76472c50aa8909535dde3ede6562ee37fb46b1bdb475a687a9113d0e9dc4bccacc3c40160ecc407dba77306a2d845e55a6943b323c1c16ab4ec58eaf0d612a5d2377272e93359574ebbd74f76431bfb5b739f13f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x98, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x40}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7770}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xda}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x31, 0x6, "ae380b23b2d72255d5201c8b506faf01b1d8ae773427f8ebc46cc77309840bbc75433245870c071c858a4f3f84"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x1050, 0x1a, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}]}, {0x1004, 0x6, "c46fc70b929fcfc297cf24796df30da5cac40c34a8e383089c7f8fab1a5a02bc5383501247a171508ee875716e09fc7d5185ed2ee677e083b3bde77e785370fbaf79e3fcca6c9b7dc6642c7bd930924586e1bc05568534dcd8ea9040fe5a6e5cf9adb7edcb3b3d8bd459bfddb0b6e148271091add6016fc554d7a97b8043ea7a2dea9a76ac74654ad3bd3e2d33a103f4f8c49e3f2c1bd6907c1585f77c4f7ebe712cbd3e7914af70955d6b9a65b678724f068eb0933456844d6cd67be124d0a1b3a6894a2b68f6c1509c1c84c24ca2172fec84975d182f64c2ae48675b9732ca1ab284907fdc7ec9f6ac5be92ac6ca0d5329ad0c751d9042acc418cdb5d283bcf305b0668866f8c2157c1a9cb4e5acb21abbd3f8cb475609b3d603a42949ad8f17e06b3b8aa4626387a5ddfa9e3f9aa33b4a0d9431f03e358c1083ceccf941d11796acfcbbeb4e4e8fcdd463fbeba80e6de6c3e0ed5c90f6dc36264c383b01920707578d581ffd98cf2a02f74d9c92c25bfd0db376db4aed35bdfdd41218ebdb89ce4521d643c1f00a7b821df5b69d20ffc09990091dfec55a2feaec653ec5b6cc1b1a735f48a726ff2c1637cf2bc6b2e6691782ab4187b9f4a11ae1de97fc007f5722143be374dbfb5ecc047623cbdd14bb664ffd47aac3de8c3d88dfca37a9fd70b97770055961fc8f0d80e7b6aaf4e245e2819a7b2eb4dbe65fe08bdbac24de8432745b2de670edec58b5e9ea39760e37a32fe7038a44340f3513e1edd6bbd14f29b42be858479da58b142ce2265177e4a37dec175af7b0a48f260b35615a23c261d57edf61d0113dafaa03c35e97751cf4b4d106d99cd5f6ec4525f0906c7e34f2567fbc1e28c601b0934046e0cc57133b0070db2799185fd61d514f58e545ac105455e82cd9d6ab2e6bdd0e963d6177fd2b98b6c674adf2f9fb7165b24d9ae3bc64fca49bc52a87aac31cf8834c98882070f894258010906c15913e87bf5f9e57e3bde8cd5c13b47fca97bfdf23101005f815aaa9c8b2a5d94d48619df8c8ae3212c363927d811dba7029e3bf306e9bb0e5934695d67782878ad065751b209f835c964aecc4124681c497034efc2a6c34c6a8b2b234dcc36739dab98bed1d9781ce97ddc5dbe05193f760830406a856e786cd5b4d1bf5e60ce6ac5eac4004fc7422596be150a40c8ebaecd642b484d1ced6f20f210d942a0a647d867f519d25827d1bcac8ef19ef92a12ad1a3ab27512dbd9ed6c6d2fecaa5dadcedd6f8acc34fc6a4d23fae3ff55a745cecf3933053414244931db8ea5979fa651ee0aed30d73b817e70556428256f5e6197420335ec3aac08d9a78fb50d4e2ff1e8a8b53ef157890f62df5aa1387b9b12400e2bd6d51cdbf08d50319108891e3839a69f25531db3cd79bb44335c2ce03e5829db9613f3c30c229edac6b0920afef998b4b890e102e3b6d94028eba56b596175c8438222e9d1e03e0652c285f5c9304ce534c806faa1c8dad92a9c8de5ca597a0a883e77e1641a1a4671ed973c1982d027761ce578b27bc49ab0366f49d56538e85e77e0e9e8820bd3704ec199598fa2038b6452a04d87f0ef9eddff44fb6fd8d8941556981a60efdff4e03738e018d75fa500659a6f71d63778aded2bc033f4edc50403cdefecaf053ce1b65aabe4617569128bf21a6642ff599047cbec4b655cac8c145bef184da4c2ec77be57785f25526b44366dfb56179ace41429dfeae29f8fef8554b88f45548030d808090a468fcec1a6b6ebe2acae487c669f7ac0fbe1ef81ca92034b48a63d303434b6331d8176c63ce0cc875375562f2618323b31136bf907a453bb7e246ea34b953c5677fadb1be0176b7a1794e4f7c01e3cb714df5945961a53e540536cf6103ffa9e5f4fdb96abe2a9bf23c1228e035781c89b9d2747619e20fd34cc328d36591372742e094314588a4c3204b8c9841de494258c6d7deedcb60c5cd26126baaddba41b250a0fec474681ef4f924663f7930835cbe1d7d4b4f312124984718b316843434a51739aa7bf4f6efce289073bec73cae824671acf43b3f95900fd81023d16547b4d45dd1087e09dc9ded0f24d8922ac4482e452192cb1b42b1f86c00100d897a5ee5594589467cf3aaff58dc4fc9d3a99d010063ad3a4cc052743e2848028940955a899b298598dcbfc32174da8d6677b452086c97b4483a349392e45a3be8f2128e48afdd1496692ac275570951f14e44ba9dbe9ed6e94281d76db43b9a5a96a1135816db5072875163bfaf6c29857c18e17c76d0b966c8ecb423df3f00c1324ac38759d0cb500c3868942cd716ff6ac5138e1325c6bb15f2c18251721b2e8710ddc270a69639f059b40835f457b4d9e0d89262ee9ebe90d280608fb24957f96993862fc713dbe15b0780fe284f6c92ac9601223c77d8772e9fb1ea0360dac812e4f6bf34f51ade639f44c3800cb9f95d0b6c6831e85dfeccc525ef3dafe1dfd4bdb8a493790283f0af142c3404eb5e7e62a33932284ba9e55149f4c0b13f3ccc29032ac9e02996509a301a73bd5f35ccb9a668a3672a5bc9378188fd29b2b8d308887667fdcbe2f875d630e2f855d1f10ae38428d169ee6c384305f7adcaee3a6f25fc6cb991cdca583165504b58698ebdbc884b8feae66a64a70b129df19cd87caf893f45e0cc3bef25b702f221f7f1eb3dcc9598ada6e67d21e7f24e969d2c8314f4cad73009656ec3761cf359142b7a3f77bf0aab70cfcab807efea4ca2835b86bcfed0cac0b9b2b5d89c4bf32a7defbd783f9a60af0a3e7d12254f825d26edeb89c6ffa81403b6d1803355b9a19fe1c2b2100ab240f0cf3a227dc1bf1a9a5bcfe0d040ed472323049f2fb0fc9fed41f907e5c49daacb09522ab078499065b81d1f3e291809c275d508cbfd5fb1833dd5f7560975c9a628ba63fbd8f5040a2a8aaee6bd43c848d85c5a1b27fdfad7183a2b3173308ddb6485e64e6c62b4b74a406cca95c514ddc50492cfcb4767ef4ac2c336a979f43208808967e98bedc40858e60dd46c9ab98bd971887905b5eed0e9474d8770255fdec37fe2ebe444763a8b1ad13bf1c8696bc42b39e39ceb57ba31a3dba419c1d0d312ff107789fa2773910ac82181fcd47f7a2421655665940fc257666599b784ed91e4e95d7e4dfdf5499e339fa699079e5b543924ba5760a4f1115082159ad58618539b61dcda7f626279585a0b0bf4f9053e7a229bafe32cbebe7f8ee1bfd793a2b6d877ba66337371c01bc1a5f8a25bf78a7a2d0ae62666da499706a046a9846fe86996b5729679fd0aec70e7d958eaec3a60b5c2420f7692bc9744bc008d6ec799f9fcf7c2b89fccdd9443f7312cff80c9fb29bae1175a738295063faa6627c9c543ff080380e2658cb3504fca9e7222f436b72f58977a70fc5d283035d23b04c6ab4b21e8be77474135197a78ab260fa67848bdd55f69cea3ec4b1a6df0bc71cbc904d1c74a8db6ae6d6d61e41a1238733a78d118b7e3fbec9ab307fc517b7a8cc222f23ee2339901ad5731c596aa94a4d71b4570292bc1df26d1369d1639765da2cfb1d6da85a9bbe8908b8b0998fc2546f475f854aeda1173f3dacad6bcf0e518c6d52efb69e9bd8f4a5f9b728d7c3ef2dba23845e0fba16a7c60a0372f6e2cd9fc7a21d411f0a1393f1aa40d8b04933e23385564693c1d15aec1d8a8930d69fc2fc06c9ddf67630d748bdf23920de75af69ce514b1a7b29231eec23a7f2a413234ca20993479a1abbd1002104b2085c2a3b09b4156e9cb962929e5f348e61ecd3bcb3973222967a9a0e0790e2e851fee99360900e8a288c4759755dd211c4e12eafd752fafc69949b15ff833055f3187106cb1021d50ed57d761a3fc9aab905cc656a52100d9f9c1075dc1783afd02f5d7d8e11fcb7ad6991d7c81a45a1a8790cb6fcbbab446a31b28a9aff8da54b0313fab19911c29755002526c5e2c981c9cd0fead7be5b9a24305e0af4a40e1224a7f2c692ecdc1402328f1d4891472658c7129903d9f8f2f410115784e8273a7418453dad6c52341235ed9e02a15deaff51afdb7c7c6d2846710aac6d1add1879c97cfb3995c9de6f1ef245372d648e65f055cc0588671b374483a911e3209946e4d2af087737e10b84bf3b98670339a2c882657053e61d64c7e0282d0ef7346d49f7dcaa005eeb0ac55a17de7c5b88f1ce66bfea8ddc636dccba6b4556dfb0777ddcc14df93226baf796bc61ffcdaa3309f23eda3779a044da7a1f0161f8ed2477c1efe1fa20d2721f13d2ffc8cf1984e27c09768671cbfe0139627a7a40092c05ea0bf25796832ee2596aa6c7aa62db50306f5a747ca96e2c1f67c8e869fd2857de9a69177c244655af2422ab4cda3454cbe0eacc7df6ea754fe887f1db95970d1f142cc0f7ea600779e2ba1c4d01677036b2e5070710be1bed9e379264b25a47b13426691d8467831db7173d282fa4e61b6bb2d731a2d21418aa6e0ef054bc1f14da2b15437dc3fd4f861b08c6ed390d86eff028814b75fc2f001349b1371bd64dd8ab0314b77750e46ab15ee497f76a50c1baa1778fc353834d50ff5bd0385a9cb80a040805878cb8de1337faf2d4c31fe65494944de18bf8b8c114072ad56f12a75448d43203d679da538fc3e5c1e02a592203909b6c8127a4b4e81ace0218420c1800affd12587697348c3f2237dbdc3c05efc02a1f44e2dc9bfbbbc3d4e21c41902f835127e4465e3072a26fc98ec131ab76b71834bb31c6a7d17c7c38b1e2dddda179e688c13e692e299954a24d0adac0702a289deba17970606751156221cfc4a89f5d11e441b38001132d80693189f2810441b5c68e115c254f4cd796adae588eec34d46231603bb634491cceb918b32307378dd555d36f43433a057e4b345b425d9380629a32a17134b088cbb1c954182c5b2882fc51848e765d6073658957837fe6adb699ba7ab58dc0c18d26a24171203f490a35cac233d140d7a673285e8b769fd2a1c79120c44ea9f257d483fb3a6638fae3fea6e84bc4302fb9bdd55a80ef9b61c799062110710b9d69d72d99f4641ccacdc3bbed133cb69f149c293637167a21b50044db69a6eeccc621f6790ad0c72ca10448c02960c7e68b7da32bcb482938488e308f77eb015eb4ba59634e6d78e7c123b8e46f32c6598d59fd3156f4580bf65548401ac243a246d17c4440510e89304b099be9fe3b855f049aa06fa64a9664ebb0bda90083a0a276977ad584d6aa244bb852164ccc563be3e5d8aa0e673f06b70fefbd45aaaa3b31313c63531bae6e00d2c405248ef83affd833729d94df4639148eacbd1b447cdf1760892552fac66008c96b0a4ae0d66852b784eee43d989051d388200a4e5d966350dfd7eb9c01a1dbdbd1fb6a80402f7f8610f1dd89de4db005cce2bb9b7f7a7877d10fb2efe414ea057ce0a9663921e231a1f9eca883abd6f3e806117abffaf0becb84f8061a6dc258e3937b5dde6d753f4d3dd49da57b57d7840e21a811e5a0a6bc66b5ab60ec4219a946ee1aa1c1d35a124c7fd15e585845249169a136c95eedf280139cedd3f143fbdd9626be8762abc79179f3d08f7c7b3e58c8c94790af105788da06c82b938239253935837f5439f4bc0c98e88e79e2ec6bee1a6115a35602d3ab53e180286f570e5a0ccc0bf5dadcc06400f02181d4d833a4f729c3f25938b3525a6e57963adef995b1f22a38a54dbdfab42c269bbefdb426189aee1c75bfbc7bb9936cff9516c226899a92f2a6ad73584e3733434d0f828435310a83"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x124, 0x7, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x200}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7fff, 0x80000000, 0x7, 0x4, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5b08}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc3b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x809}]}, {0xa5, 0x6, "72e814b2c57b735e46f94a5bdea2a829c042319bb0a1dd484f352cea4a954bf9bd6ad214b804fbc46362ff824ab7461e143f3b619a372889a40d2a23681fffe579b20ac90b61fc7fc6c78427fc8271a25cbcdac16c61bacbce55f9c921c64f0af848719e7abe34093df535474b60999abf7efc976fbf0f18695b2248b283ca9068fbaadd1d78a0df94e741361fdc873021f62ace773b4e513838532007583ba987"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x148, 0x10, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "aa502c63964eefd3b4fdad5138e79077"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0xffffffffffffffff, 0xffffffff, 0x3}}]}, {0xe2, 0x6, "1a24c775fbc39adeff94abd5baeada8912e2d9a14e6474971eb77cc398c936bb50ad79c7651ef9e36c769fd6c99a307ade029a11b4cb35cd396dafa6aa165dc912e8d0ded17c1696a482276376a988a2b9b72fd59d78914961e947beb6191dfddeaa664f65afd0f6b767bc5553a4bdf0b24887c538b8505711ce40f7e5abab6e3e8c7ff697e107463fd0854a9ce4bbe29646d78acc5bc88750c527db55c9edb1cf4c21ce00c7d66ba8fadb2752de04a2b6e76575d057514b43d7d1ab523672964269c4e6321f73387aea336c9bd4e108c8aefaf18c88f1d71339780825cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x1818}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x600)

1.37550106s ago: executing program 0 (id=3814):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4)
r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80000)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x8, @loopback, 0x5}, 0x1c)
ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000100)="17b7f3656d1d87fcbfccbdc5dc94a6efa73ff77176d5c149522ad007a2954c968749")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000aab000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.374983091s ago: executing program 3 (id=3815):
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/65)

843.546675ms ago: executing program 2 (id=3816):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x44}, 0x1, 0x2}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003100)="37e601", 0x3}], 0x1}}], 0x1, 0x9200000000000000)
r4 = dup3(r2, r1, 0x0)
recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58cb23c0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000440)='\x00\x00', 0x4d, 0x20003bc4, 0x0, 0x0)

778.164483ms ago: executing program 2 (id=3817):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64)
r3 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async)
madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000400))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async)
accept4(r3, 0x0, &(0x7f0000000000), 0x80000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$eventfd(r6, &(0x7f0000000100), 0xfffffd79) (async)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x330f, 0x78) (async)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="4f18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300010400000000000000060000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03"], 0x0)

710.324179ms ago: executing program 0 (id=3818):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x1) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x1)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x5, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="182000000000015828cf73b143e7c7000000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="182000000000015828cf73b143e7c7000000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000)
kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0443050c"], 0x7) (async)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0443050c"], 0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)

656.131457ms ago: executing program 2 (id=3819):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = socket$inet6(0xa, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r3 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x261, 0x0, r2}, &(0x7f0000000140), 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00')
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) (fail_nth: 1)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=@dstopts={0x62}, 0x8)

375.337212ms ago: executing program 4 (id=3820):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (fail_nth: 1)

379.598µs ago: executing program 2 (id=3821):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)

0s ago: executing program 4 (id=3822):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d31300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8640, 0x0)
ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000040))
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x95)

kernel console output (not intermixed with test programs):

21] RSP: 002b:00007f8ca9535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  585.957405][T16421] RAX: ffffffffffffffda RBX: 00007f8ca8815fa0 RCX: 00007f8ca859acb9
[  585.957417][T16421] RDX: 00002000000019c0 RSI: 0000000000004604 RDI: 0000000000000003
[  585.957428][T16421] RBP: 00007f8ca9535090 R08: 0000000000000000 R09: 0000000000000000
[  585.957438][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  585.957449][T16421] R13: 00007f8ca8816038 R14: 00007f8ca8815fa0 R15: 00007ffdc7237be8
[  585.957473][T16421]  </TASK>
[  585.957480][T16421] ERROR: Out of memory at tomoyo_realpath_from_path.
[  586.246418][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3410'.
[  587.101131][T16146] veth0_vlan: entered promiscuous mode
[  587.152199][T16146] veth1_vlan: entered promiscuous mode
[  587.246787][T16146] veth0_macvtap: entered promiscuous mode
[  587.264326][T16146] veth1_macvtap: entered promiscuous mode
[  587.310784][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.408668][   T30] audit: type=1326 audit(1769352237.129:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  587.415484][T16179] Bluetooth: hci4: Frame reassembly failed (-84)
[  587.553420][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.580000][ T2135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.616664][ T2135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.638540][ T2135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.710631][   T30] audit: type=1326 audit(1769352237.129:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  587.745947][ T2135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.784822][   T30] audit: type=1326 audit(1769352237.129:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  588.865521][   T30] audit: type=1326 audit(1769352237.129:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.041827][   T30] audit: type=1326 audit(1769352237.129:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.071828][   T30] audit: type=1326 audit(1769352237.129:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.098475][   T30] audit: type=1326 audit(1769352237.129:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.122881][T16481] tmpfs: Bad value for 'mpol'
[  589.522000][   T30] audit: type=1326 audit(1769352237.129:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.574298][ T5881] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  589.628125][T15156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  589.634530][ T5807] Bluetooth: hci4: command 0x1003 tx timeout
[  589.682926][ T6219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.694409][ T6219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.712503][   T30] audit: type=1326 audit(1769352237.129:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.827366][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.873669][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.896490][   T30] audit: type=1326 audit(1769352237.129:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.3.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  589.927028][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  589.953541][ T5881] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  589.991946][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.010540][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.022240][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.337023][ T5881] usb 2-1: config 0 descriptor??
[  590.818396][ T5881] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  591.105346][ T5881] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  591.236934][ T5881] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  591.330979][ T5881] usb 2-1: USB disconnect, device number 40
[  591.476590][T16511] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  591.487941][T16511] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  591.732072][T16524] gfs2: error -5 reading superblock
[  591.893993][T16516] fido_id[16516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  593.145119][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  593.498810][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  593.521154][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.540017][   T24] usb 1-1: Product: syz
[  593.552101][   T24] usb 1-1: Manufacturer: syz
[  593.563489][   T24] usb 1-1: SerialNumber: syz
[  593.577117][T16543] FAULT_INJECTION: forcing a failure.
[  593.577117][T16543] name failslab, interval 1, probability 0, space 0, times 0
[  593.585237][   T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  593.600594][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  593.600607][   T30] audit: type=1400 audit(1769352242.994:3267): avc:  denied  { firmware_load } for  pid=5881 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  593.675290][ T5881] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  593.714900][T16543] CPU: 0 UID: 0 PID: 16543 Comm: syz.2.3434 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.714928][T16543] Tainted: [L]=SOFTLOCKUP
[  593.714937][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  593.714947][T16543] Call Trace:
[  593.714953][T16543]  <TASK>
[  593.714959][T16543]  dump_stack_lvl+0x100/0x190
[  593.714986][T16543]  should_fail_ex.cold+0x5/0xa
[  593.715016][T16543]  should_failslab+0xc2/0x120
[  593.715039][T16543]  ? copy_splice_read+0x1a3/0xb90
[  593.715058][T16543]  __kmalloc_noprof+0xf6/0x9c0
[  593.715082][T16543]  ? copy_splice_read+0x1a3/0xb90
[  593.715102][T16543]  copy_splice_read+0x1a3/0xb90
[  593.715126][T16543]  ? __pfx_copy_splice_read+0x10/0x10
[  593.715147][T16543]  ? look_up_lock_class+0x55/0x120
[  593.715168][T16543]  ? lockdep_init_map_type+0x5c/0x250
[  593.715188][T16543]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  593.715210][T16543]  ? __pfx_copy_splice_read+0x10/0x10
[  593.715230][T16543]  do_splice_read+0x285/0x370
[  593.715253][T16543]  splice_direct_to_actor+0x2a1/0xa30
[  593.715276][T16543]  ? __pfx_direct_splice_actor+0x10/0x10
[  593.715301][T16543]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  593.715321][T16543]  ? __pfx_file_has_perm+0x10/0x10
[  593.715350][T16543]  do_splice_direct+0x174/0x240
[  593.715372][T16543]  ? __pfx_do_splice_direct+0x10/0x10
[  593.715393][T16543]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  593.715416][T16543]  ? bpf_lsm_file_permission+0x9/0x10
[  593.715438][T16543]  ? security_file_permission+0x76/0x210
[  593.715459][T16543]  ? rw_verify_area+0xce/0x6d0
[  593.715477][T16543]  do_sendfile+0xadc/0xe20
[  593.715499][T16543]  ? __pfx_do_sendfile+0x10/0x10
[  593.715517][T16543]  ? __fget_files+0x21f/0x3d0
[  593.715545][T16543]  __x64_sys_sendfile64+0x1d8/0x220
[  593.715567][T16543]  ? ksys_write+0x1ac/0x250
[  593.715586][T16543]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  593.715622][T16543]  do_syscall_64+0xc9/0xf80
[  593.715641][T16543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.715658][T16543] RIP: 0033:0x7fd95359acb9
[  593.715672][T16543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  593.715688][T16543] RSP: 002b:00007fd954381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  593.715705][T16543] RAX: ffffffffffffffda RBX: 00007fd953815fa0 RCX: 00007fd95359acb9
[  593.715716][T16543] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  593.715726][T16543] RBP: 00007fd954381090 R08: 0000000000000000 R09: 0000000000000000
[  593.715737][T16543] R10: 000000007ffffffc R11: 0000000000000246 R12: 0000000000000001
[  593.715747][T16543] R13: 00007fd953816038 R14: 00007fd953815fa0 R15: 00007ffc3785dad8
[  593.715771][T16543]  </TASK>
[  594.324201][   T30] audit: type=1400 audit(1769352243.481:3268): avc:  denied  { unmount } for  pid=13646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  594.468763][   T48] usb 1-1: USB disconnect, device number 21
[  594.636057][T16553] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  594.793346][ T5881] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  594.908682][ T5881] ath9k_htc: Failed to initialize the device
[  594.920253][   T48] usb 1-1: ath9k_htc: USB layer deinitialized
[  595.063384][T16561] FAULT_INJECTION: forcing a failure.
[  595.063384][T16561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  595.076592][T16561] CPU: 1 UID: 0 PID: 16561 Comm: syz.2.3436 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  595.076618][T16561] Tainted: [L]=SOFTLOCKUP
[  595.076625][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  595.076634][T16561] Call Trace:
[  595.076641][T16561]  <TASK>
[  595.076647][T16561]  dump_stack_lvl+0x100/0x190
[  595.076675][T16561]  should_fail_ex.cold+0x5/0xa
[  595.076707][T16561]  _copy_from_user+0x2e/0xd0
[  595.076732][T16561]  copy_msghdr_from_user+0x9f/0x4f0
[  595.076752][T16561]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  595.076779][T16561]  ? mark_held_locks+0x40/0x70
[  595.076798][T16561]  ? finish_task_switch.isra.0+0x204/0xb70
[  595.076824][T16561]  ? lockdep_hardirqs_on+0x78/0x100
[  595.076848][T16561]  ___sys_sendmsg+0x106/0x1e0
[  595.076867][T16561]  ? __pfx____sys_sendmsg+0x10/0x10
[  595.076897][T16561]  ? find_held_lock+0x2b/0x80
[  595.076936][T16561]  __sys_sendmsg+0x170/0x220
[  595.076960][T16561]  ? __pfx___sys_sendmsg+0x10/0x10
[  595.076982][T16561]  ? ksys_write+0x17e/0x250
[  595.077016][T16561]  do_syscall_64+0xc9/0xf80
[  595.077037][T16561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.077056][T16561] RIP: 0033:0x7fd95359acb9
[  595.077070][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.077086][T16561] RSP: 002b:00007fd9517f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  595.077107][T16561] RAX: ffffffffffffffda RBX: 00007fd953816090 RCX: 00007fd95359acb9
[  595.077118][T16561] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  595.077129][T16561] RBP: 00007fd9517f6090 R08: 0000000000000000 R09: 0000000000000000
[  595.077139][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  595.077149][T16561] R13: 00007fd953816128 R14: 00007fd953816090 R15: 00007ffc3785dad8
[  595.077174][T16561]  </TASK>
[  597.303564][ T5881] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  597.498120][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.512508][ T5881] usb 2-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00
[  597.524541][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.550276][ T5881] usb 2-1: config 0 descriptor??
[  597.699156][ T5841] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  597.710134][ T5874] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  597.859503][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  597.874682][ T5874] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  597.887090][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.895651][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.906233][ T5874] usb 4-1: Product: syz
[  597.914330][ T5841] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  597.916929][ T5874] usb 4-1: Manufacturer: syz
[  597.923362][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.938597][ T5874] usb 4-1: SerialNumber: syz
[  597.962336][ T5874] usb 4-1: config 0 descriptor??
[  597.965793][ T5841] usb 5-1: config 0 descriptor??
[  598.275159][T16591] vlan2: entered allmulticast mode
[  598.280439][T16591] bond_slave_1: entered allmulticast mode
[  598.315147][ T5874] usb 4-1: selecting invalid altsetting 1
[  598.321017][ T5874] comedi comedi5: could not switch to alternate setting 1
[  598.328220][ T5874] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  598.341547][ T5874] usb 4-1: USB disconnect, device number 32
[  598.492827][   T30] audit: type=1400 audit(1769352247.578:3269): avc:  denied  { read } for  pid=16598 comm="syz.0.3450" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  598.525926][T16599] overlayfs: conflicting lowerdir path
[  598.551015][   T30] audit: type=1400 audit(1769352247.597:3270): avc:  denied  { open } for  pid=16598 comm="syz.0.3450" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  598.575915][   T30] audit: type=1400 audit(1769352247.606:3271): avc:  denied  { ioctl } for  pid=16598 comm="syz.0.3450" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  599.258790][T16565] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.3441'.
[  599.330513][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3441'.
[  599.374665][T16578] netlink: 'syz.4.3441': attribute type 2 has an invalid length.
[  599.422373][T16611] FAULT_INJECTION: forcing a failure.
[  599.422373][T16611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  599.628895][ T5881] usbhid 2-1:0.0: can't add hid device: -71
[  599.667930][T16611] CPU: 0 UID: 0 PID: 16611 Comm: syz.3.3453 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  599.667949][T16611] Tainted: [L]=SOFTLOCKUP
[  599.667952][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  599.667958][T16611] Call Trace:
[  599.667962][T16611]  <TASK>
[  599.667966][T16611]  dump_stack_lvl+0x100/0x190
[  599.667985][T16611]  should_fail_ex.cold+0x5/0xa
[  599.668004][T16611]  _copy_from_user+0x2e/0xd0
[  599.668019][T16611]  usbdev_ioctl+0x13fa/0x3aa0
[  599.668039][T16611]  ? __pfx_usbdev_ioctl+0x10/0x10
[  599.668058][T16611]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  599.668075][T16611]  ? do_vfs_ioctl+0x226/0x13e0
[  599.668088][T16611]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  599.668109][T16611]  ? selinux_file_ioctl+0x139/0x290
[  599.668120][T16611]  ? selinux_file_ioctl+0xb4/0x290
[  599.668131][T16611]  ? __pfx_usbdev_ioctl+0x10/0x10
[  599.668148][T16611]  __x64_sys_ioctl+0x18e/0x210
[  599.668160][T16611]  do_syscall_64+0xc9/0xf80
[  599.668173][T16611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.668184][T16611] RIP: 0033:0x7fa5fad9acb9
[  599.668193][T16611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.668204][T16611] RSP: 002b:00007fa5fbcd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  599.668215][T16611] RAX: ffffffffffffffda RBX: 00007fa5fb015fa0 RCX: 00007fa5fad9acb9
[  599.668222][T16611] RDX: 0000200000000140 RSI: 00000000c0105500 RDI: 0000000000000003
[  599.668228][T16611] RBP: 00007fa5fbcd0090 R08: 0000000000000000 R09: 0000000000000000
[  599.668234][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.668240][T16611] R13: 00007fa5fb016038 R14: 00007fa5fb015fa0 R15: 00007fff7c786198
[  599.668254][T16611]  </TASK>
[  599.861340][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  600.084150][ T5881] usb 2-1: USB disconnect, device number 41
[  601.157206][T16625] team_slave_0: entered promiscuous mode
[  601.163271][T16625] team_slave_1: entered promiscuous mode
[  601.859631][T16624] FAULT_INJECTION: forcing a failure.
[  601.859631][T16624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.904682][T16624] CPU: 1 UID: 0 PID: 16624 Comm: syz.3.3458 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.904710][T16624] Tainted: [L]=SOFTLOCKUP
[  601.904716][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  601.904726][T16624] Call Trace:
[  601.904732][T16624]  <TASK>
[  601.904740][T16624]  dump_stack_lvl+0x100/0x190
[  601.904765][T16624]  should_fail_ex.cold+0x5/0xa
[  601.904793][T16624]  _copy_to_user+0x32/0xd0
[  601.904817][T16624]  simple_read_from_buffer+0xcb/0x170
[  601.904837][T16624]  proc_fail_nth_read+0x1af/0x230
[  601.904860][T16624]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  601.904884][T16624]  ? rw_verify_area+0xce/0x6d0
[  601.904899][T16624]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  601.904920][T16624]  vfs_read+0x1e4/0xb30
[  601.904940][T16624]  ? __pfx_vfs_read+0x10/0x10
[  601.904955][T16624]  ? find_held_lock+0x2b/0x80
[  601.904977][T16624]  ? __fget_files+0x215/0x3d0
[  601.905001][T16624]  ? __fget_files+0x21f/0x3d0
[  601.905028][T16624]  ksys_read+0x12a/0x250
[  601.905046][T16624]  ? __pfx_ksys_read+0x10/0x10
[  601.905069][T16624]  do_syscall_64+0xc9/0xf80
[  601.905089][T16624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.905105][T16624] RIP: 0033:0x7fa5fad5b58e
[  601.905119][T16624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  601.905135][T16624] RSP: 002b:00007fa5fbccffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  601.905152][T16624] RAX: ffffffffffffffda RBX: 00007fa5fbcd06c0 RCX: 00007fa5fad5b58e
[  601.905168][T16624] RDX: 000000000000000f RSI: 00007fa5fbcd00a0 RDI: 0000000000000004
[  601.905178][T16624] RBP: 00007fa5fbcd0090 R08: 0000000000000000 R09: 0000000000000000
[  601.905187][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.905197][T16624] R13: 00007fa5fb016038 R14: 00007fa5fb015fa0 R15: 00007fff7c786198
[  601.905222][T16624]  </TASK>
[  602.188262][T16622] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  602.347031][ T5867] usb 5-1: USB disconnect, device number 44
[  602.356304][T16625] team_slave_0: left promiscuous mode
[  602.361950][T16625] team_slave_1: left promiscuous mode
[  602.653647][   T30] audit: type=1326 audit(1769352251.469:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.1.3460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff42f59acb9 code=0x0
[  603.108970][   T30] audit: type=1326 audit(1769352251.899:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16635 comm="syz.4.3461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93e859acb9 code=0x0
[  603.840208][   T30] audit: type=1400 audit(1769352252.554:3274): avc:  denied  { ioctl } for  pid=16645 comm="syz.0.3462" path="socket:[53346]" dev="sockfs" ino=53346 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  604.750509][   T30] audit: type=1400 audit(1769352253.424:3275): avc:  denied  { append } for  pid=16655 comm="syz.0.3466" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  605.035726][T16671] bpf: Bad value for 'mode'
[  605.443187][T16674] FAULT_INJECTION: forcing a failure.
[  605.443187][T16674] name failslab, interval 1, probability 0, space 0, times 0
[  605.455855][T16674] CPU: 0 UID: 0 PID: 16674 Comm: syz.0.3474 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  605.455881][T16674] Tainted: [L]=SOFTLOCKUP
[  605.455887][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  605.455897][T16674] Call Trace:
[  605.455903][T16674]  <TASK>
[  605.455909][T16674]  dump_stack_lvl+0x100/0x190
[  605.455936][T16674]  should_fail_ex.cold+0x5/0xa
[  605.455966][T16674]  should_failslab+0xc2/0x120
[  605.455989][T16674]  kmem_cache_alloc_noprof+0x83/0x780
[  605.456011][T16674]  ? io_submit_one+0x124/0x1fb0
[  605.456039][T16674]  ? io_submit_one+0x124/0x1fb0
[  605.456061][T16674]  io_submit_one+0x124/0x1fb0
[  605.456086][T16674]  ? __lock_acquire+0x4a5/0x2630
[  605.456103][T16674]  ? rcu_is_watching+0x12/0xc0
[  605.456126][T16674]  ? irqentry_exit+0x180/0x670
[  605.456143][T16674]  ? lockdep_hardirqs_on+0x78/0x100
[  605.456162][T16674]  ? __pfx_io_submit_one+0x10/0x10
[  605.456195][T16674]  ? __might_fault+0xc5/0x140
[  605.456220][T16674]  ? __x64_sys_io_submit+0x1b1/0x3a0
[  605.456245][T16674]  __x64_sys_io_submit+0x1b1/0x3a0
[  605.456272][T16674]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  605.456306][T16674]  ? rcu_is_watching+0x12/0xc0
[  605.456330][T16674]  do_syscall_64+0xc9/0xf80
[  605.456351][T16674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.456369][T16674] RIP: 0033:0x7f8ca859acb9
[  605.456382][T16674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.456399][T16674] RSP: 002b:00007f8ca9535028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  605.456416][T16674] RAX: ffffffffffffffda RBX: 00007f8ca8815fa0 RCX: 00007f8ca859acb9
[  605.456427][T16674] RDX: 0000200000001300 RSI: 0000000000000001 RDI: 00007f8ca9514000
[  605.456438][T16674] RBP: 00007f8ca9535090 R08: 0000000000000000 R09: 0000000000000000
[  605.456448][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.456457][T16674] R13: 00007f8ca8816038 R14: 00007f8ca8815fa0 R15: 00007ffdc7237be8
[  605.456487][T16674]  </TASK>
[  605.831987][T16679] tipc: Failed to remove unknown binding: 66,0,0/0:930518451/930518452
[  605.845669][T16679] tipc: Failed to remove unknown binding: 66,0,0/0:930518451/930518452
[  606.359553][T16687] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  608.301078][ T5881] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  608.445928][T16716] bpf: Bad value for 'mode'
[  608.501271][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  608.602924][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.742592][ T5881] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00
[  608.751675][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.839829][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3488'.
[  609.159297][   T30] audit: type=1400 audit(1769352257.269:3276): avc:  denied  { ioctl } for  pid=16724 comm="syz.3.3488" path="socket:[52642]" dev="sockfs" ino=52642 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  609.314489][ T5881] usb 3-1: config 0 descriptor??
[  609.332434][ T5881] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  609.373025][ T5881] usb 3-1: Detected SIO
[  609.405066][ T5881] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  609.465328][T16733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16733 comm=syz.1.3490
[  609.506731][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3490'.
[  609.581202][ T5841] usb 3-1: USB disconnect, device number 23
[  609.591579][ T5841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  609.594833][T16734] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  609.679316][T16734] cramfs: wrong magic
[  609.685446][ T5841] ftdi_sio 3-1:0.0: device disconnected
[  610.662738][   T30] audit: type=1400 audit(1769352258.952:3277): avc:  denied  { read } for  pid=16743 comm="syz.4.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  610.734833][T16747] FAULT_INJECTION: forcing a failure.
[  610.734833][T16747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  610.755113][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.1.3494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  610.755141][T16747] Tainted: [L]=SOFTLOCKUP
[  610.755146][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  610.755156][T16747] Call Trace:
[  610.755162][T16747]  <TASK>
[  610.755168][T16747]  dump_stack_lvl+0x100/0x190
[  610.755191][T16747]  should_fail_ex.cold+0x5/0xa
[  610.755210][T16747]  _copy_from_user+0x2e/0xd0
[  610.755225][T16747]  ____sys_sendmsg+0x1d1/0xc30
[  610.755237][T16747]  ? __pfx_____sys_sendmsg+0x10/0x10
[  610.755254][T16747]  ___sys_sendmsg+0x190/0x1e0
[  610.755266][T16747]  ? __pfx____sys_sendmsg+0x10/0x10
[  610.755283][T16747]  ? find_held_lock+0x2b/0x80
[  610.755311][T16747]  __sys_sendmsg+0x170/0x220
[  610.755326][T16747]  ? __pfx___sys_sendmsg+0x10/0x10
[  610.755349][T16747]  do_syscall_64+0xc9/0xf80
[  610.755362][T16747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.755373][T16747] RIP: 0033:0x7ff42f59acb9
[  610.755382][T16747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.755392][T16747] RSP: 002b:00007ff4304a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  610.755403][T16747] RAX: ffffffffffffffda RBX: 00007ff42f815fa0 RCX: 00007ff42f59acb9
[  610.755410][T16747] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  610.755416][T16747] RBP: 00007ff4304a2090 R08: 0000000000000000 R09: 0000000000000000
[  610.755422][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.755428][T16747] R13: 00007ff42f816038 R14: 00007ff42f815fa0 R15: 00007ffd3cb308f8
[  610.755442][T16747]  </TASK>
[  611.073391][ T5881] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  611.281809][ T5881] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  611.291110][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.299352][ T5881] usb 1-1: Product: syz
[  611.304547][ T5881] usb 1-1: Manufacturer: syz
[  611.310063][ T5881] usb 1-1: SerialNumber: syz
[  612.908763][T16765] gfs2: error -5 reading superblock
[  613.235953][ T5881] rtl8150 1-1:1.0: couldn't reset the device
[  613.242703][ T5881] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  613.317313][   T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  613.435977][ T5881] usb 1-1: USB disconnect, device number 22
[  613.494811][   T30] audit: type=1400 audit(1769352261.600:3278): avc:  denied  { write } for  pid=16769 comm="syz.0.3503" path="socket:[53680]" dev="sockfs" ino=53680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  613.576235][   T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  613.616515][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.626150][   T24] usb 3-1: Product: syz
[  613.631973][   T24] usb 3-1: Manufacturer: syz
[  613.636683][   T24] usb 3-1: SerialNumber: syz
[  613.674943][   T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  613.707075][   T48] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  613.926326][   T30] audit: type=1400 audit(1769352262.002:3279): avc:  denied  { getopt } for  pid=16776 comm="syz.1.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  613.959605][ T5881] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  613.997403][T16779] bpf: Bad value for 'mode'
[  614.067497][T16780] tipc: Failed to remove unknown binding: 66,0,0/0:2485770288/2485770289
[  614.078455][T16780] tipc: Failed to remove unknown binding: 66,0,0/0:2485770288/2485770289
[  614.120171][    T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  614.141306][ T5881] usb 1-1: Using ep0 maxpacket: 8
[  614.148175][ T5881] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  614.158199][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  614.200101][   T24] usb 3-1: USB disconnect, device number 24
[  614.213106][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  614.224289][ T5881] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  614.239468][ T5881] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  614.248850][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.293279][    T9] usb 5-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config
[  614.310166][    T9] usb 5-1: config 93 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  614.323439][    T9] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  614.332542][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.361608][    T9] usbhid 5-1:93.0: couldn't find an input interrupt endpoint
[  614.502238][ T5881] usb 1-1: GET_CAPABILITIES returned 0
[  614.507812][ T5881] usbtmc 1-1:16.0: can't read capabilities
[  614.724242][T16770] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90
[  614.868238][   T48] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  614.886352][   T48] ath9k_htc: Failed to initialize the device
[  614.897400][   T24] usb 3-1: ath9k_htc: USB layer deinitialized
[  616.894783][   T24] usb 1-1: USB disconnect, device number 23
[  617.675246][ T5841] usb 5-1: USB disconnect, device number 45
[  617.794164][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3514'.
[  617.948134][T16808] netlink: 'syz.4.3514': attribute type 10 has an invalid length.
[  617.956045][T16808] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3514'.
[  619.047137][   T48] IPVS: starting estimator thread 0...
[  619.174896][T16842] IPVS: using max 50 ests per chain, 120000 per kthread
[  619.422502][ T5841] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  619.432286][   T30] audit: type=1400 audit(1769352267.137:3280): avc:  denied  { append } for  pid=16847 comm="syz.4.3519" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  619.645704][ T5841] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  619.672862][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.699896][ T5841] usb 2-1: Product: syz
[  619.730572][ T5841] usb 2-1: Manufacturer: syz
[  619.821900][ T5841] usb 2-1: SerialNumber: syz
[  621.911265][ T5841] (unnamed net_device) (uninitialized): Assigned a random MAC address: 72:b9:b4:24:ac:92
[  621.958283][ T5841] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[  622.565674][ T5841] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  622.594306][   T30] audit: type=1400 audit(1769352270.112:3281): avc:  denied  { getopt } for  pid=16883 comm="syz.4.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  622.741080][ T5841] usb 3-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config
[  622.763756][ T5841] usb 3-1: config 93 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  622.799359][ T5841] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  622.830355][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.866582][ T5841] usbhid 3-1:93.0: couldn't find an input interrupt endpoint
[  622.933729][T16900] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  623.469364][   T48] usb 2-1: USB disconnect, device number 42
[  623.643474][   T30] audit: type=1326 audit(1769352271.094:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16920 comm="syz.4.3535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93e859acb9 code=0x0
[  624.149813][T16933] Malformed UNC in devname
[  624.149813][T16933] 
[  624.156733][T16933] CIFS: VFS: Malformed UNC in devname
[  625.191871][T16954] netlink: 'syz.4.3536': attribute type 3 has an invalid length.
[  625.202312][T16954] netlink: 'syz.4.3536': attribute type 3 has an invalid length.
[  625.614048][   T24] usb 3-1: USB disconnect, device number 25
[  625.679339][T16960] bpf: Bad value for 'mode'
[  625.794069][   T30] audit: type=1400 audit(1769352273.068:3283): avc:  denied  { read } for  pid=16962 comm="syz.4.3538" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  625.852416][   T30] audit: type=1400 audit(1769352273.068:3284): avc:  denied  { open } for  pid=16962 comm="syz.4.3538" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  625.989668][T16968] FAULT_INJECTION: forcing a failure.
[  625.989668][T16968] name failslab, interval 1, probability 0, space 0, times 0
[  626.002962][T16968] CPU: 0 UID: 0 PID: 16968 Comm: syz.4.3538 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  626.002990][T16968] Tainted: [L]=SOFTLOCKUP
[  626.002996][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  626.003006][T16968] Call Trace:
[  626.003012][T16968]  <TASK>
[  626.003019][T16968]  dump_stack_lvl+0x100/0x190
[  626.003046][T16968]  should_fail_ex.cold+0x5/0xa
[  626.003077][T16968]  should_failslab+0xc2/0x120
[  626.003102][T16968]  __kvmalloc_node_noprof+0x101/0xac0
[  626.003124][T16968]  ? hash_netiface_create+0x47f/0x1280
[  626.003152][T16968]  ? hash_netiface_create+0x47f/0x1280
[  626.003170][T16968]  hash_netiface_create+0x47f/0x1280
[  626.003195][T16968]  ? __pfx_hash_netiface_create+0x10/0x10
[  626.003218][T16968]  ip_set_create+0x6b8/0x14f0
[  626.003243][T16968]  ? __mutex_lock+0x26a/0x1b90
[  626.003263][T16968]  ? __pfx_ip_set_create+0x10/0x10
[  626.003310][T16968]  nfnetlink_rcv_msg+0x9f4/0x1200
[  626.003339][T16968]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  626.003362][T16968]  ? __lock_acquire+0x4a5/0x2630
[  626.003379][T16968]  ? finish_task_switch.isra.0+0x204/0xb70
[  626.003435][T16968]  ? avc_has_perm_noaudit+0x145/0x3b0
[  626.003467][T16968]  netlink_rcv_skb+0x159/0x420
[  626.003492][T16968]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  626.003513][T16968]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  626.003550][T16968]  ? ns_capable+0xd2/0xf0
[  626.003576][T16968]  nfnetlink_rcv+0x1b3/0x440
[  626.003595][T16968]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  626.003621][T16968]  netlink_unicast+0x5aa/0x870
[  626.003650][T16968]  ? __pfx_netlink_unicast+0x10/0x10
[  626.003685][T16968]  netlink_sendmsg+0x8b0/0xda0
[  626.003715][T16968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  626.003738][T16968]  ? __might_fault+0x70/0x140
[  626.003766][T16968]  ____sys_sendmsg+0xa54/0xc30
[  626.003786][T16968]  ? __pfx_____sys_sendmsg+0x10/0x10
[  626.003814][T16968]  ___sys_sendmsg+0x190/0x1e0
[  626.003834][T16968]  ? __pfx____sys_sendmsg+0x10/0x10
[  626.003864][T16968]  ? find_held_lock+0x2b/0x80
[  626.003904][T16968]  __sys_sendmsg+0x170/0x220
[  626.003928][T16968]  ? __pfx___sys_sendmsg+0x10/0x10
[  626.003959][T16968]  ? trace_irq_enable.constprop.0+0x2d/0x110
[  626.003993][T16968]  do_syscall_64+0xc9/0xf80
[  626.004013][T16968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.004032][T16968] RIP: 0033:0x7f93e859acb9
[  626.004047][T16968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.004064][T16968] RSP: 002b:00007f93e67b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  626.004082][T16968] RAX: ffffffffffffffda RBX: 00007f93e8816180 RCX: 00007f93e859acb9
[  626.004094][T16968] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  626.004106][T16968] RBP: 00007f93e67b4090 R08: 0000000000000000 R09: 0000000000000000
[  626.004116][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  626.004127][T16968] R13: 00007f93e8816218 R14: 00007f93e8816180 R15: 00007ffe1391d828
[  626.004152][T16968]  </TASK>
[  626.321660][T16969] tipc: Failed to remove unknown binding: 66,0,0/0:3932725025/3932725026
[  626.333260][T16969] tipc: Failed to remove unknown binding: 66,0,0/0:3932725025/3932725026
[  626.419217][   T30] audit: type=1400 audit(1769352273.068:3285): avc:  denied  { ioctl } for  pid=16962 comm="syz.4.3538" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  626.937516][T16978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16978 comm=syz.4.3542
[  627.001727][T16981] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  627.036264][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3542'.
[  627.129340][T16978] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  627.159537][T16978] cramfs: wrong magic
[  627.322809][   T48] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  627.493999][   T48] usb 4-1: Using ep0 maxpacket: 32
[  627.512087][   T48] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  627.517550][   T30] audit: type=1400 audit(1769352274.723:3286): avc:  denied  { create } for  pid=16982 comm="syz.2.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  627.520867][   T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  627.552736][   T30] audit: type=1400 audit(1769352274.751:3287): avc:  denied  { bind } for  pid=16982 comm="syz.2.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  627.614038][   T48] usb 4-1: config 0 has no interface number 0
[  627.645845][   T48] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  627.667729][   T48] usb 4-1: config 0 interface 85 has no altsetting 0
[  627.717617][   T48] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  627.730370][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.742184][   T48] usb 4-1: Product: syz
[  627.755178][   T48] usb 4-1: Manufacturer: syz
[  627.766768][   T48] usb 4-1: SerialNumber: syz
[  627.792932][   T48] usb 4-1: config 0 descriptor??
[  627.810173][   T48] appletouch 4-1:0.85: Could not find int-in endpoint
[  627.818557][   T48] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  627.845080][   T48] usbhid 4-1:0.85: couldn't find an input interrupt endpoint
[  628.350080][   T30] audit: type=1326 audit(1769352275.284:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  628.711678][   T30] audit: type=1326 audit(1769352275.284:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  629.153823][ T5841] usb 4-1: USB disconnect, device number 33
[  629.237819][   T30] audit: type=1326 audit(1769352275.284:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  629.367883][   T30] audit: type=1326 audit(1769352275.284:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  629.492622][   T30] audit: type=1326 audit(1769352275.284:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  630.231817][ T5921] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  630.293214][T17029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3554'.
[  630.316806][T17029] unsupported nlmsg_type 40
[  630.433840][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  630.456619][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  630.474198][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  630.490986][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  630.501193][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  630.514511][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  630.536014][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.880377][ T5921] usb 5-1: GET_CAPABILITIES returned 0
[  630.937930][ T5921] usbtmc 5-1:16.0: can't read capabilities
[  631.113173][   T48] usb 5-1: USB disconnect, device number 46
[  631.259038][   T30] kauditd_printk_skb: 75 callbacks suppressed
[  631.259054][   T30] audit: type=1326 audit(1769352278.222:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.0.3559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ca859acb9 code=0x0
[  633.118583][   T30] audit: type=1326 audit(1769352279.961:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42f59acb9 code=0x7ffc0000
[  633.162243][   T30] audit: type=1326 audit(1769352279.990:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42f59acb9 code=0x7ffc0000
[  633.428067][   T30] audit: type=1326 audit(1769352280.251:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17070 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  633.729419][   T30] audit: type=1326 audit(1769352280.279:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff42f59acb9 code=0x7ffc0000
[  633.794912][   T30] audit: type=1326 audit(1769352280.513:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17070 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  633.933549][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  633.940587][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  634.122049][   T30] audit: type=1326 audit(1769352280.663:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17070 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  634.146619][   T30] audit: type=1326 audit(1769352280.663:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17070 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  634.539813][ T5874] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  634.617565][   T30] audit: type=1326 audit(1769352280.663:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17070 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  634.703670][   T30] audit: type=1326 audit(1769352280.682:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17070 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5fad9acb9 code=0x7ffc0000
[  634.820417][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.943677][ T5874] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  634.944642][T17094] FAULT_INJECTION: forcing a failure.
[  634.944642][T17094] name failslab, interval 1, probability 0, space 0, times 0
[  635.006037][T17094] CPU: 0 UID: 0 PID: 17094 Comm: syz.4.3567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.006064][T17094] Tainted: [L]=SOFTLOCKUP
[  635.006071][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  635.006080][T17094] Call Trace:
[  635.006086][T17094]  <TASK>
[  635.006092][T17094]  dump_stack_lvl+0x100/0x190
[  635.006119][T17094]  should_fail_ex.cold+0x5/0xa
[  635.006146][T17094]  should_failslab+0xc2/0x120
[  635.006168][T17094]  ? tomoyo_realpath_from_path+0xb6/0x690
[  635.006186][T17094]  __kmalloc_noprof+0xf6/0x9c0
[  635.006217][T17094]  ? tomoyo_realpath_from_path+0xb6/0x690
[  635.006234][T17094]  tomoyo_realpath_from_path+0xb6/0x690
[  635.006257][T17094]  tomoyo_path_number_perm+0x23c/0x580
[  635.006282][T17094]  ? tomoyo_path_number_perm+0x22e/0x580
[  635.006309][T17094]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  635.006357][T17094]  ? find_held_lock+0x2b/0x80
[  635.006379][T17094]  ? hook_file_ioctl_common+0x146/0x410
[  635.006400][T17094]  ? __fget_files+0x215/0x3d0
[  635.006424][T17094]  ? __fget_files+0x21f/0x3d0
[  635.006445][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.006448][T17094]  security_file_ioctl+0xd3/0x230
[  635.006470][T17094]  __x64_sys_ioctl+0xb7/0x210
[  635.006488][T17094]  do_syscall_64+0xc9/0xf80
[  635.006506][T17094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.006521][T17094] RIP: 0033:0x7f93e859acb9
[  635.006534][T17094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.006550][T17094] RSP: 002b:00007f93e67f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  635.006566][T17094] RAX: ffffffffffffffda RBX: 00007f93e8815fa0 RCX: 00007f93e859acb9
[  635.006576][T17094] RDX: 0000200000000000 RSI: 00000000c01864b0 RDI: 0000000000000003
[  635.006586][T17094] RBP: 00007f93e67f6090 R08: 0000000000000000 R09: 0000000000000000
[  635.006596][T17094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.006605][T17094] R13: 00007f93e8816038 R14: 00007f93e8815fa0 R15: 00007ffe1391d828
[  635.006627][T17094]  </TASK>
[  635.007270][T17094] ERROR: Out of memory at tomoyo_realpath_from_path.
[  635.288014][ T5874] usb 1-1: config 0 descriptor??
[  635.318239][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'.
[  635.340298][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3568'.
[  636.155026][T17102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3569'.
[  636.533096][T17107] FAULT_INJECTION: forcing a failure.
[  636.533096][T17107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.553501][T17107] CPU: 1 UID: 0 PID: 17107 Comm: syz.2.3572 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  636.553529][T17107] Tainted: [L]=SOFTLOCKUP
[  636.553536][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  636.553546][T17107] Call Trace:
[  636.553552][T17107]  <TASK>
[  636.553559][T17107]  dump_stack_lvl+0x100/0x190
[  636.553586][T17107]  should_fail_ex.cold+0x5/0xa
[  636.553615][T17107]  _copy_from_user+0x2e/0xd0
[  636.553636][T17107]  copy_msghdr_from_user+0x9f/0x4f0
[  636.553649][T17107]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  636.553667][T17107]  ___sys_sendmsg+0x106/0x1e0
[  636.553679][T17107]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.553697][T17107]  ? find_held_lock+0x2b/0x80
[  636.553720][T17107]  __sys_sendmsg+0x170/0x220
[  636.553735][T17107]  ? __pfx___sys_sendmsg+0x10/0x10
[  636.553758][T17107]  do_syscall_64+0xc9/0xf80
[  636.553771][T17107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.553783][T17107] RIP: 0033:0x7fd95359acb9
[  636.553792][T17107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.553802][T17107] RSP: 002b:00007fd954381028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.553814][T17107] RAX: ffffffffffffffda RBX: 00007fd953815fa0 RCX: 00007fd95359acb9
[  636.553821][T17107] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  636.553828][T17107] RBP: 00007fd954381090 R08: 0000000000000000 R09: 0000000000000000
[  636.553834][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.553840][T17107] R13: 00007fd953816038 R14: 00007fd953815fa0 R15: 00007ffc3785dad8
[  636.553854][T17107]  </TASK>
[  636.554037][T17108] syzkaller0: entered promiscuous mode
[  636.612591][T17111] FAULT_INJECTION: forcing a failure.
[  636.612591][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.618506][T17108] syzkaller0: entered allmulticast mode
[  636.752811][T17111] CPU: 0 UID: 0 PID: 17111 Comm: syz.4.3573 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  636.752838][T17111] Tainted: [L]=SOFTLOCKUP
[  636.752844][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  636.752854][T17111] Call Trace:
[  636.752860][T17111]  <TASK>
[  636.752866][T17111]  dump_stack_lvl+0x100/0x190
[  636.752893][T17111]  should_fail_ex.cold+0x5/0xa
[  636.752920][T17111]  _copy_from_user+0x2e/0xd0
[  636.752942][T17111]  copy_msghdr_from_user+0x9f/0x4f0
[  636.752960][T17111]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  636.752987][T17111]  ___sys_sendmsg+0x106/0x1e0
[  636.753013][T17111]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.753040][T17111]  ? find_held_lock+0x2b/0x80
[  636.753076][T17111]  __sys_sendmsg+0x170/0x220
[  636.753096][T17111]  ? __pfx___sys_sendmsg+0x10/0x10
[  636.753130][T17111]  do_syscall_64+0xc9/0xf80
[  636.753150][T17111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.753166][T17111] RIP: 0033:0x7f93e859acb9
[  636.753180][T17111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.753195][T17111] RSP: 002b:00007f93e67d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.753212][T17111] RAX: ffffffffffffffda RBX: 00007f93e8816090 RCX: 00007f93e859acb9
[  636.753223][T17111] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007
[  636.753233][T17111] RBP: 00007f93e67d5090 R08: 0000000000000000 R09: 0000000000000000
[  636.753242][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.753252][T17111] R13: 00007f93e8816128 R14: 00007f93e8816090 R15: 00007ffe1391d828
[  636.753274][T17111]  </TASK>
[  637.341758][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  637.341775][   T30] audit: type=1400 audit(1769352283.918:3398): avc:  denied  { ioctl } for  pid=17117 comm="syz.1.3575" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  637.905325][   T30] audit: type=1326 audit(1769352284.386:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  637.934742][   T30] audit: type=1326 audit(1769352284.386:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  638.520148][   T13] Bluetooth: hci4: Frame reassembly failed (-84)
[  638.627783][ T5874] usbhid 1-1:0.0: can't add hid device: -71
[  638.635742][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  638.647107][ T5874] usb 1-1: USB disconnect, device number 24
[  638.724107][T17136] Bluetooth: MGMT ver 1.23
[  638.943078][   T30] audit: type=1326 audit(1769352285.405:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17141 comm="syz.1.3580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff42f59acb9 code=0x0
[  639.054017][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'.
[  639.073583][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3583'.
[  640.551054][T14516] IPVS: starting estimator thread 0...
[  640.678630][T17160] IPVS: using max 82 ests per chain, 196800 per kthread
[  640.686219][T15156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  641.006917][ T5874] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  641.077350][   T30] audit: type=1326 audit(1769352287.407:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.4.3588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93e859acb9 code=0x0
[  641.322796][T17177] IPv6: NLM_F_REPLACE set, but no existing node found!
[  642.165916][ T5874] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  642.206895][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.230352][ T5874] usb 4-1: Product: syz
[  642.881152][T17192] Set syz0 is full, maxelem 0 reached
[  643.017433][ T5874] usb 4-1: Manufacturer: syz
[  643.033977][ T5874] usb 4-1: SerialNumber: syz
[  643.303520][T17197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  643.903093][T17199] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  643.947843][   T30] audit: type=1400 audit(1769352290.082:3403): avc:  denied  { bind } for  pid=17200 comm="syz.4.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  644.000162][T17199] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  644.085787][T17199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  644.460213][T14516] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  644.622352][T14516] usb 1-1: device descriptor read/64, error -71
[  644.716722][ T5874] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:0b:41:15:50:2d
[  644.919577][T14516] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  644.945730][   T30] audit: type=1400 audit(1769352291.027:3404): avc:  denied  { setopt } for  pid=17210 comm="syz.2.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  645.059691][T14516] usb 1-1: device descriptor read/64, error -71
[  645.078061][T17213] FAULT_INJECTION: forcing a failure.
[  645.078061][T17213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  645.091523][T17213] CPU: 0 UID: 0 PID: 17213 Comm: syz.2.3599 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  645.091550][T17213] Tainted: [L]=SOFTLOCKUP
[  645.091556][T17213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  645.091566][T17213] Call Trace:
[  645.091572][T17213]  <TASK>
[  645.091578][T17213]  dump_stack_lvl+0x100/0x190
[  645.091606][T17213]  should_fail_ex.cold+0x5/0xa
[  645.091636][T17213]  _copy_from_user+0x2e/0xd0
[  645.091660][T17213]  do_sys_poll+0x345/0xeb0
[  645.091679][T17213]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  645.091706][T17213]  ? is_bpf_text_address+0x94/0x1a0
[  645.091733][T17213]  ? __kernel_text_address+0xd/0x30
[  645.091755][T17213]  ? __pfx_do_sys_poll+0x10/0x10
[  645.091852][T17213]  ? __mutex_unlock_slowpath+0x15c/0x790
[  645.091875][T17213]  ? set_user_sigmask+0x1e1/0x270
[  645.091894][T17213]  ? __fget_files+0x215/0x3d0
[  645.091913][T17213]  ? __pfx_set_user_sigmask+0x10/0x10
[  645.091936][T17213]  ? __fget_files+0x21f/0x3d0
[  645.091958][T17213]  __x64_sys_ppoll+0x2b5/0x350
[  645.091979][T17213]  ? __pfx___x64_sys_ppoll+0x10/0x10
[  645.091996][T17213]  ? ksys_write+0x1ac/0x250
[  645.092014][T17213]  ? __pfx_ksys_write+0x10/0x10
[  645.092037][T17213]  do_syscall_64+0xc9/0xf80
[  645.092056][T17213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.092073][T17213] RIP: 0033:0x7fd95359acb9
[  645.092087][T17213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.092102][T17213] RSP: 002b:00007fd954381028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  645.092119][T17213] RAX: ffffffffffffffda RBX: 00007fd953815fa0 RCX: 00007fd95359acb9
[  645.092129][T17213] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  645.092139][T17213] RBP: 00007fd954381090 R08: 0000000000000000 R09: 0000000000000000
[  645.092148][T17213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.092158][T17213] R13: 00007fd953816038 R14: 00007fd953815fa0 R15: 00007ffc3785dad8
[  645.092180][T17213]  </TASK>
[  645.307346][T14516] usb usb1-port1: attempt power cycle
[  645.431846][T17215] bpf: Bad value for 'mode'
[  645.439494][T17215] tipc: Failed to remove unknown binding: 66,0,0/0:1553081338/1553081339
[  645.448533][T17215] tipc: Failed to remove unknown binding: 66,0,0/0:1553081338/1553081339
[  645.555057][   T30] audit: type=1326 audit(1769352291.598:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.2.3601" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd95359acb9 code=0x0
[  645.667897][T14516] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  645.696127][T14516] usb 1-1: device descriptor read/8, error -71
[  646.427748][T14516] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  646.965002][T14516] usb 1-1: device descriptor read/8, error -71
[  646.981807][T17228] bpf: Bad value for 'mode'
[  647.058031][    T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  647.081301][T14516] usb usb1-port1: unable to enumerate USB device
[  647.171879][T17231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17231 comm=syz.2.3605
[  647.185647][T17231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3605'.
[  647.239622][    T9] usb 5-1: Using ep0 maxpacket: 8
[  647.284883][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  647.293625][    T9] usb 5-1: config 0 has no interface number 0
[  647.313163][T17237] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  647.326431][    T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  647.346675][T17237] cramfs: wrong magic
[  647.368620][    T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  647.382558][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  647.598157][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.659035][    T9] usb 5-1: config 0 descriptor??
[  647.669342][    T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  647.898537][T14516] usb 5-1: USB disconnect, device number 47
[  649.365917][T17255] netlink: 'syz.0.3610': attribute type 1 has an invalid length.
[  649.400596][   T30] audit: type=1400 audit(1769352295.199:3406): avc:  denied  { write } for  pid=17251 comm="syz.3.3609" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  649.452485][T17255] netlink: 'syz.0.3610': attribute type 2 has an invalid length.
[  649.730435][   T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  649.880298][   T24] usb 1-1: device descriptor read/64, error -71
[  650.327175][   T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  650.864300][   T24] usb 1-1: device descriptor read/64, error -71
[  650.990867][   T24] usb usb1-port1: attempt power cycle
[  651.429868][   T24] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  651.460011][   T24] usb 1-1: device descriptor read/8, error -71
[  651.556488][T17276] Malformed UNC in devname
[  651.556488][T17276] 
[  651.563305][T17276] CIFS: VFS: Malformed UNC in devname
[  651.919414][ T5874] rtl8150 4-1:1.0: eth1: rtl8150 is detected
[  651.931581][ T5874] usb 4-1: USB disconnect, device number 34
[  652.039806][   T24] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  652.196907][T17279] trusted_key: encrypted_key: master key parameter 'def' is invalid
[  652.220496][T17279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3616'.
[  652.236187][   T24] usb 1-1: device descriptor read/8, error -71
[  652.362540][   T24] usb usb1-port1: unable to enumerate USB device
[  652.747618][   T30] audit: type=1400 audit(1769352298.314:3407): avc:  denied  { create } for  pid=17282 comm="syz.1.3618" name="#18" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  652.770111][   T30] audit: type=1400 audit(1769352298.314:3408): avc:  denied  { link } for  pid=17282 comm="syz.1.3618" name="#18" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  652.803471][   T30] audit: type=1400 audit(1769352298.314:3409): avc:  denied  { rename } for  pid=17282 comm="syz.1.3618" name="#19" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  652.830780][ T5841] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  653.424853][ T5841] usb 3-1: config 0 has an invalid interface number: 100 but max is 0
[  653.433908][ T5841] usb 3-1: config 0 has no interface number 0
[  653.457725][ T5841] usb 3-1: config 0 interface 100 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  653.508966][ T5841] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=66.da
[  653.518234][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.548708][ T5841] usb 3-1: Product: syz
[  653.555575][ T5841] usb 3-1: Manufacturer: syz
[  653.563489][ T5841] usb 3-1: SerialNumber: syz
[  653.570483][ T5841] usb 3-1: config 0 descriptor??
[  653.578456][T17281] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  653.798895][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'.
[  653.823793][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'.
[  654.829929][ T5874] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  655.001382][ T5874] usb 5-1: device descriptor read/64, error -71
[  655.130129][ T5841] usb 3-1: USB disconnect, device number 26
[  655.202558][T17308] bpf: Bad value for 'mode'
[  655.311073][ T5874] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  655.515128][ T5874] usb 5-1: device descriptor read/64, error -71
[  656.248831][ T5874] usb usb5-port1: attempt power cycle
[  656.972889][T17315] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  657.042791][ T5874] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  657.113231][ T5874] usb 5-1: device descriptor read/8, error -71
[  657.374693][ T5874] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  657.505325][   T30] audit: type=1400 audit(1769352302.738:3410): avc:  denied  { write } for  pid=17325 comm="syz.1.3632" path="socket:[55288]" dev="sockfs" ino=55288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  657.534723][ T5874] usb 5-1: device descriptor read/8, error -71
[  657.566757][T17337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3634'.
[  657.652400][ T5874] usb usb5-port1: unable to enumerate USB device
[  659.319872][   T30] audit: type=1326 audit(1769352304.422:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.319934][   T30] audit: type=1326 audit(1769352304.422:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.319974][   T30] audit: type=1326 audit(1769352304.432:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.320014][   T30] audit: type=1326 audit(1769352304.441:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.320054][   T30] audit: type=1326 audit(1769352304.441:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.320093][   T30] audit: type=1326 audit(1769352304.469:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.447074][   T30] audit: type=1326 audit(1769352304.488:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.447111][   T30] audit: type=1326 audit(1769352304.506:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  659.447133][   T30] audit: type=1326 audit(1769352304.506:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.4.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  660.006737][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'.
[  660.007927][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'.
[  661.726472][T15156] Bluetooth: hci4: command 0x1003 tx timeout
[  661.728529][ T5818] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  661.933759][T17400] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  662.044899][ T6219] Bluetooth: hci4: Frame reassembly failed (-84)
[  662.755195][T17410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3644'.
[  662.814716][T17411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17411 comm=syz.3.3644
[  662.814832][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3644'.
[  663.499959][   T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  663.689333][   T24] usb 1-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config
[  663.689368][   T24] usb 1-1: config 93 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  663.689390][   T24] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  663.689403][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.695550][   T24] usbhid 1-1:93.0: couldn't find an input interrupt endpoint
[  664.133419][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  664.133451][   T30] audit: type=1400 audit(1769352308.968:3486): avc:  denied  { setopt } for  pid=17417 comm="syz.3.3647" lport=54133 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  664.448226][ T5818] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  665.121022][T17440] gfs2: error -5 reading superblock
[  665.488353][   T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  665.696793][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  665.706911][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.728384][   T24] usb 4-1: Product: syz
[  665.746381][   T24] usb 4-1: Manufacturer: syz
[  665.751014][   T24] usb 4-1: SerialNumber: syz
[  665.767334][   T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  665.789679][ T5874] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  665.969388][   T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  665.980221][T14516] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  666.108488][   T24] usb 3-1: device descriptor read/64, error -71
[  666.144502][T14516] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  666.151107][ T5881] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  666.153782][T14516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.170049][T14516] usb 5-1: Product: syz
[  666.175939][T14516] usb 5-1: Manufacturer: syz
[  666.180781][T14516] usb 5-1: SerialNumber: syz
[  666.190710][T14516] r8152-cfgselector 5-1: Unknown version 0x0000
[  666.199917][T14516] r8152-cfgselector 5-1: config 0 descriptor??
[  666.282023][    T9] usb 4-1: USB disconnect, device number 35
[  666.348853][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.359831][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  666.369712][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  666.382733][ T5881] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  666.392525][   T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  666.400765][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.417590][ T5881] usb 2-1: config 0 descriptor??
[  666.469401][T14516] usb 1-1: USB disconnect, device number 33
[  666.557594][   T24] usb 3-1: device descriptor read/64, error -71
[  666.637850][T17461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17461 comm=syz.0.3659
[  666.676001][   T24] usb usb3-port1: attempt power cycle
[  666.676791][T14516] r8152-cfgselector 5-1: USB disconnect, device number 52
[  666.700793][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3659'.
[  666.710354][   T30] audit: type=1400 audit(1769352311.372:3487): avc:  denied  { read write } for  pid=17455 comm="syz.1.3657" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  666.734792][   T30] audit: type=1400 audit(1769352311.372:3488): avc:  denied  { open } for  pid=17455 comm="syz.1.3657" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  666.785448][T17462] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  666.792387][T17462] cramfs: wrong magic
[  667.594917][   T30] audit: type=1400 audit(1769352311.643:3489): avc:  denied  { bind } for  pid=17463 comm="syz.0.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  667.595948][ T5874] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  667.626461][ T5874] ath9k_htc: Failed to initialize the device
[  667.638510][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[  667.658510][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  667.668798][ T5881] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  667.678594][ T5881] plantronics 0003:047F:FFFF.0013: item fetching failed at offset 12/15
[  667.688014][ T5881] plantronics 0003:047F:FFFF.0013: parse failed
[  667.694640][ T5881] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22
[  667.705803][   T24] usb 3-1: device descriptor read/8, error -71
[  667.859172][T17473] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  667.895434][ T5874] usb 2-1: USB disconnect, device number 43
[  667.953795][   T30] audit: type=1400 audit(1769352312.541:3490): avc:  denied  { write } for  pid=17477 comm="syz.4.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  668.015094][   T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  668.040191][ T6039] Bluetooth: hci4: Frame reassembly failed (-84)
[  668.075588][   T30] audit: type=1326 audit(1769352312.579:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.0.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  668.087775][   T24] usb 3-1: device descriptor read/8, error -71
[  668.099249][   T30] audit: type=1326 audit(1769352312.579:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.0.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  668.129135][   T30] audit: type=1326 audit(1769352312.579:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.0.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  668.152920][   T30] audit: type=1326 audit(1769352312.579:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.0.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  668.176482][   T30] audit: type=1326 audit(1769352312.579:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.0.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca859acb9 code=0x7ffc0000
[  668.262489][T17485] syzkaller0: entered promiscuous mode
[  668.268004][T17485] syzkaller0: entered allmulticast mode
[  668.762832][   T24] usb usb3-port1: unable to enumerate USB device
[  669.509181][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3670'.
[  669.656348][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3670'.
[  670.165467][T17495] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  670.195385][T15156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  670.196235][ T5818] Bluetooth: hci4: command 0x1003 tx timeout
[  670.939489][T17503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17503 comm=syz.2.3671
[  670.992893][T17503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3671'.
[  671.070074][T17508] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  671.076994][T17508] cramfs: wrong magic
[  671.082866][T17514] netlink: 'syz.1.3674': attribute type 1 has an invalid length.
[  671.138207][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  671.138222][   T30] audit: type=1400 audit(1769352315.525:3532): avc:  denied  { create } for  pid=17512 comm="syz.1.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  671.176656][   T30] audit: type=1400 audit(1769352315.535:3533): avc:  denied  { write } for  pid=17512 comm="syz.1.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  671.276158][T17521] FAULT_INJECTION: forcing a failure.
[  671.276158][T17521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.326524][T17521] CPU: 0 UID: 0 PID: 17521 Comm: syz.3.3675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  671.326553][T17521] Tainted: [L]=SOFTLOCKUP
[  671.326559][T17521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  671.326570][T17521] Call Trace:
[  671.326576][T17521]  <TASK>
[  671.326583][T17521]  dump_stack_lvl+0x100/0x190
[  671.326611][T17521]  should_fail_ex.cold+0x5/0xa
[  671.326642][T17521]  _copy_to_user+0x32/0xd0
[  671.326667][T17521]  simple_read_from_buffer+0xcb/0x170
[  671.326690][T17521]  proc_fail_nth_read+0x1af/0x230
[  671.326713][T17521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  671.326739][T17521]  ? rw_verify_area+0xce/0x6d0
[  671.326756][T17521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  671.326777][T17521]  vfs_read+0x1e4/0xb30
[  671.326799][T17521]  ? __pfx_vfs_read+0x10/0x10
[  671.326815][T17521]  ? find_held_lock+0x2b/0x80
[  671.326839][T17521]  ? __fget_files+0x215/0x3d0
[  671.326864][T17521]  ? __fget_files+0x21f/0x3d0
[  671.326892][T17521]  ksys_read+0x12a/0x250
[  671.326910][T17521]  ? __pfx_ksys_read+0x10/0x10
[  671.326929][T17521]  ? fput+0x79/0x100
[  671.326956][T17521]  do_syscall_64+0xc9/0xf80
[  671.326977][T17521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.326995][T17521] RIP: 0033:0x7fa5fad5b58e
[  671.327010][T17521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  671.327027][T17521] RSP: 002b:00007fa5fbccffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  671.327045][T17521] RAX: ffffffffffffffda RBX: 00007fa5fbcd06c0 RCX: 00007fa5fad5b58e
[  671.327056][T17521] RDX: 000000000000000f RSI: 00007fa5fbcd00a0 RDI: 0000000000000004
[  671.327066][T17521] RBP: 00007fa5fbcd0090 R08: 0000000000000000 R09: 0000000000000000
[  671.327077][T17521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.327087][T17521] R13: 00007fa5fb016038 R14: 00007fa5fb015fa0 R15: 00007fff7c786198
[  671.327112][T17521]  </TASK>
[  671.543699][   T30] audit: type=1400 audit(1769352315.909:3534): avc:  denied  { map } for  pid=17522 comm="syz.4.3677" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  671.545057][T17514] afs: Unknown parameter 'd'
[  671.901123][ T5841] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  672.120631][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  672.469228][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  672.469253][ T5841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  672.528249][ T5841] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  672.528277][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.528296][ T5841] usb 3-1: Product: syz
[  672.528309][ T5841] usb 3-1: Manufacturer: syz
[  672.528321][ T5841] usb 3-1: SerialNumber: syz
[  672.530201][ T5841] usb 3-1: config 0 descriptor??
[  672.530833][T17523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  672.811520][   T24] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  672.975932][T17523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  673.015694][T17542] binder: 17539:17542 ioctl 89f3 2000000006c0 returned -22
[  673.021381][T17542] binder: 17539:17542 ioctl 80045505 200000000300 returned -22
[  673.029662][T17542] binder: 17539:17542 ioctl c0306201 200000000240 returned -11
[  673.151101][   T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  673.151130][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.175239][   T24] usb 1-1: config 0 descriptor??
[  673.285576][   T30] audit: type=1326 audit(1769352317.518:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.358390][ T6039] Bluetooth: hci4: Frame reassembly failed (-84)
[  673.362122][   T30] audit: type=1326 audit(1769352317.518:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.362161][   T30] audit: type=1326 audit(1769352317.518:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.362198][   T30] audit: type=1326 audit(1769352317.518:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.362235][   T30] audit: type=1326 audit(1769352317.518:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.362265][   T30] audit: type=1326 audit(1769352317.518:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.362295][   T30] audit: type=1326 audit(1769352317.518:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93e859acb9 code=0x7ffc0000
[  673.745583][T17554] can0: slcan on ttyS3.
[  674.314481][T17554] can0 (unregistered): slcan off ttyS3.
[  674.567183][T17550] IPv6: NLM_F_REPLACE set, but no existing node found!
[  674.737967][ T5841] usb 3-1: USB disconnect, device number 31
[  674.920847][T17559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17559 comm=syz.1.3686
[  674.921537][T17559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3686'.
[  674.980397][T17561] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  674.980570][T17561] cramfs: wrong magic
[  675.222627][T17564] Malformed UNC in devname
[  675.222627][T17564] 
[  675.222680][T17564] CIFS: VFS: Malformed UNC in devname
[  675.576500][T15156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  675.813419][   T48] usb 1-1: USB disconnect, device number 34
[  675.875143][T17569] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  676.017780][T17566] kvm: kvm [17565]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880
[  676.017925][T17566] kvm: kvm [17565]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  676.026265][T17566] kvm: kvm [17565]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa088
[  676.026873][T17566] kvm: kvm [17565]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd1a8
[  676.026937][T17566] kvm: kvm [17565]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  676.269225][T17583] Malformed UNC in devname
[  676.269225][T17583] 
[  676.269272][T17583] CIFS: VFS: Malformed UNC in devname
[  677.158628][T17592] bpf: Bad value for 'mode'
[  677.269610][T14516] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  677.363594][T17596] tipc: Failed to remove unknown binding: 66,0,0/0:1841293972/1841293973
[  677.472453][T14516] usb 4-1: Using ep0 maxpacket: 32
[  677.509320][T14516] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  677.560041][T17595] tipc: Failed to remove unknown binding: 66,0,0/0:1841293972/1841293973
[  677.578029][T14516] usb 4-1: config 0 has no interface number 0
[  677.586629][T17601] 9p: Bad value for 'wfdno'
[  677.596370][T14516] usb 4-1: config 0 interface 184 has no altsetting 0
[  677.611517][T14516] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  677.620965][T14516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.634748][T14516] usb 4-1: Product: syz
[  677.638937][T14516] usb 4-1: Manufacturer: syz
[  677.644150][T14516] usb 4-1: SerialNumber: syz
[  677.671133][T14516] usb 4-1: config 0 descriptor??
[  678.031154][T14516] smsc75xx v1.0.0
[  678.153081][T17608] comedi comedi0: Minor 2147483639 is invalid!
[  678.437255][   T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  678.506329][T17618] 8021q: adding VLAN 0 to HW filter on device bond1
[  678.551356][T17618] bond1: (slave veth3): Enslaving as an active interface with an up link
[  678.605978][   T48] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  678.627088][ T5881] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  678.635266][   T24] usb 5-1: Using ep0 maxpacket: 16
[  678.646612][T17618] vlan2: entered allmulticast mode
[  678.661902][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  678.672845][T17618] bond_slave_1: entered allmulticast mode
[  678.685935][T17618] bond_slave_1: entered promiscuous mode
[  678.693524][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  678.714380][T17618] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  678.726448][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  678.739248][   T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  678.764965][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.789929][   T24] usb 5-1: Product: syz
[  678.794118][   T24] usb 5-1: Manufacturer: syz
[  678.799091][   T48] usb 1-1: Using ep0 maxpacket: 32
[  678.809362][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  678.816111][   T48] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  678.825671][   T24] usb 5-1: SerialNumber: syz
[  678.837379][   T48] usb 1-1: config 0 has no interface number 0
[  678.851256][   T24] usb 5-1: config 0 descriptor??
[  678.859081][   T48] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.894804][   T48] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.978806][ T5881] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  678.997863][   T48] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  679.013314][ T5881] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  679.027657][   T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.039823][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  679.097349][ T5881] usb 3-1: Product: syz
[  679.104929][   T48] usb 1-1: config 0 descriptor??
[  679.114228][T14516] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  679.130534][ T5881] usb 3-1: Manufacturer: syz
[  679.142481][ T5881] usb 3-1: SerialNumber: syz
[  679.159866][T14516] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  679.199397][ T5881] usb 3-1: config 0 descriptor??
[  679.229101][ T5881] usb 3-1: no audio or video endpoints found
[  679.241488][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'.
[  679.497794][   T30] kauditd_printk_skb: 35 callbacks suppressed
[  679.497919][   T30] audit: type=1400 audit(1769352323.345:3577): avc:  denied  { kexec_image_load } for  pid=17624 comm="syz.1.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  679.726498][T14516] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  679.806826][T14516] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  679.825444][T14516] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  679.909284][T14516] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  679.945971][T14516] usb 4-1: USB disconnect, device number 36
[  680.097913][T17630] kvm: kvm [17629]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880
[  680.122998][   T48] uclogic 0003:28BD:0094.0014: pen parameters not found
[  680.130316][T17630] kvm: kvm [17629]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  680.130985][   T48] uclogic 0003:28BD:0094.0014: interface is invalid, ignoring
[  680.317392][T17634] FAULT_INJECTION: forcing a failure.
[  680.317392][T17634] name failslab, interval 1, probability 0, space 0, times 0
[  680.381521][T17634] CPU: 0 UID: 0 PID: 17634 Comm: syz.3.3706 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  680.381551][T17634] Tainted: [L]=SOFTLOCKUP
[  680.381557][T17634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  680.381568][T17634] Call Trace:
[  680.381575][T17634]  <TASK>
[  680.381582][T17634]  dump_stack_lvl+0x100/0x190
[  680.381610][T17634]  should_fail_ex.cold+0x5/0xa
[  680.381642][T17634]  should_failslab+0xc2/0x120
[  680.381666][T17634]  kmem_cache_alloc_node_noprof+0x8c/0x880
[  680.381691][T17634]  ? __alloc_skb+0x156/0x410
[  680.381717][T17634]  ? __alloc_skb+0x35d/0x410
[  680.381741][T17634]  ? __alloc_skb+0x156/0x410
[  680.381759][T17634]  __alloc_skb+0x156/0x410
[  680.381778][T17634]  ? __alloc_skb+0x35d/0x410
[  680.381797][T17634]  ? __pfx___alloc_skb+0x10/0x10
[  680.381816][T17634]  ? __kernel_text_address+0xd/0x30
[  680.381836][T17634]  ? selinux_socket_getpeersec_dgram+0x1a4/0x380
[  680.381866][T17634]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  680.381902][T17634]  netlink_alloc_large_skb+0x69/0x150
[  680.381930][T17634]  netlink_sendmsg+0x680/0xda0
[  680.381959][T17634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.381983][T17634]  ? __might_fault+0x70/0x140
[  680.382011][T17634]  ____sys_sendmsg+0xa54/0xc30
[  680.382031][T17634]  ? __pfx_____sys_sendmsg+0x10/0x10
[  680.382059][T17634]  ___sys_sendmsg+0x190/0x1e0
[  680.382078][T17634]  ? __pfx____sys_sendmsg+0x10/0x10
[  680.382107][T17634]  ? find_held_lock+0x2b/0x80
[  680.382147][T17634]  __sys_sendmsg+0x170/0x220
[  680.382171][T17634]  ? __pfx___sys_sendmsg+0x10/0x10
[  680.382210][T17634]  do_syscall_64+0xc9/0xf80
[  680.382231][T17634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.382248][T17634] RIP: 0033:0x7fa5fad9acb9
[  680.382263][T17634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.382280][T17634] RSP: 002b:00007fa5fbcd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  680.382298][T17634] RAX: ffffffffffffffda RBX: 00007fa5fb015fa0 RCX: 00007fa5fad9acb9
[  680.382310][T17634] RDX: 0000000000000814 RSI: 00002000000003c0 RDI: 0000000000000004
[  680.382322][T17634] RBP: 00007fa5fbcd0090 R08: 0000000000000000 R09: 0000000000000000
[  680.382333][T17634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  680.382344][T17634] R13: 00007fa5fb016038 R14: 00007fa5fb015fa0 R15: 00007fff7c786198
[  680.382369][T17634]  </TASK>
[  680.982863][T17639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3708'.
[  681.009483][T17639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3708'.
[  681.171760][   T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  681.358904][T14516] usb 5-1: USB disconnect, device number 53
[  681.396067][   T24] usb 4-1: Using ep0 maxpacket: 8
[  681.403641][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  681.415045][   T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  681.427475][   T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  681.448101][   T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  681.468923][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  681.478291][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.495731][   T24] usb 4-1: Product: syz
[  681.503214][   T24] usb 4-1: Manufacturer: syz
[  681.513504][   T24] usb 4-1: SerialNumber: syz
[  681.636010][T14516] usb 3-1: USB disconnect, device number 32
[  681.739579][T17651] FAULT_INJECTION: forcing a failure.
[  681.739579][T17651] name failslab, interval 1, probability 0, space 0, times 0
[  681.757758][T17651] CPU: 0 UID: 0 PID: 17651 Comm: syz.2.3711 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  681.757786][T17651] Tainted: [L]=SOFTLOCKUP
[  681.757793][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  681.757804][T17651] Call Trace:
[  681.757811][T17651]  <TASK>
[  681.757818][T17651]  dump_stack_lvl+0x100/0x190
[  681.757846][T17651]  should_fail_ex.cold+0x5/0xa
[  681.757877][T17651]  should_failslab+0xc2/0x120
[  681.757900][T17651]  ? tomoyo_encode2+0xfb/0x3c0
[  681.757917][T17651]  __kmalloc_noprof+0xf6/0x9c0
[  681.757942][T17651]  ? tomoyo_encode2+0xfb/0x3c0
[  681.757960][T17651]  tomoyo_encode2+0xfb/0x3c0
[  681.757983][T17651]  tomoyo_encode+0x29/0x50
[  681.758000][T17651]  tomoyo_realpath_from_path+0x18c/0x690
[  681.758026][T17651]  tomoyo_path_number_perm+0x23c/0x580
[  681.758051][T17651]  ? tomoyo_path_number_perm+0x22e/0x580
[  681.758080][T17651]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  681.758133][T17651]  ? find_held_lock+0x2b/0x80
[  681.758156][T17651]  ? hook_file_ioctl_common+0x146/0x410
[  681.758178][T17651]  ? __fget_files+0x215/0x3d0
[  681.758201][T17651]  ? __fget_files+0x21f/0x3d0
[  681.758226][T17651]  security_file_ioctl+0xd3/0x230
[  681.758247][T17651]  __x64_sys_ioctl+0xb7/0x210
[  681.758267][T17651]  do_syscall_64+0xc9/0xf80
[  681.758289][T17651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.758307][T17651] RIP: 0033:0x7fd95359acb9
[  681.758329][T17651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.758344][T17651] RSP: 002b:00007fd954381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  681.758363][T17651] RAX: ffffffffffffffda RBX: 00007fd953815fa0 RCX: 00007fd95359acb9
[  681.758375][T17651] RDX: 0000200000000d40 RSI: 00000000c06864a1 RDI: 0000000000000003
[  681.758386][T17651] RBP: 00007fd954381090 R08: 0000000000000000 R09: 0000000000000000
[  681.758397][T17651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.758408][T17651] R13: 00007fd953816038 R14: 00007fd953815fa0 R15: 00007ffc3785dad8
[  681.758434][T17651]  </TASK>
[  681.758496][T17651] ERROR: Out of memory at tomoyo_realpath_from_path.
[  682.133619][   T30] audit: type=1400 audit(1769352325.805:3578): avc:  denied  { getopt } for  pid=17653 comm="syz.1.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  682.167104][T17656] FAULT_INJECTION: forcing a failure.
[  682.167104][T17656] name failslab, interval 1, probability 0, space 0, times 0
[  682.197745][T17656] CPU: 0 UID: 0 PID: 17656 Comm: syz.2.3713 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  682.197773][T17656] Tainted: [L]=SOFTLOCKUP
[  682.197779][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  682.197789][T17656] Call Trace:
[  682.197795][T17656]  <TASK>
[  682.197802][T17656]  dump_stack_lvl+0x100/0x190
[  682.197828][T17656]  should_fail_ex.cold+0x5/0xa
[  682.197858][T17656]  should_failslab+0xc2/0x120
[  682.197879][T17656]  ? tomoyo_encode2+0xfb/0x3c0
[  682.197897][T17656]  __kmalloc_noprof+0xf6/0x9c0
[  682.197919][T17656]  ? tomoyo_encode2+0xfb/0x3c0
[  682.197935][T17656]  tomoyo_encode2+0xfb/0x3c0
[  682.197954][T17656]  tomoyo_encode+0x29/0x50
[  682.197966][T17656]  tomoyo_realpath_from_path+0x18c/0x690
[  682.197982][T17656]  tomoyo_path_number_perm+0x23c/0x580
[  682.197999][T17656]  ? tomoyo_path_number_perm+0x22e/0x580
[  682.198020][T17656]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  682.198070][T17656]  ? find_held_lock+0x2b/0x80
[  682.198091][T17656]  ? hook_file_ioctl_common+0x146/0x410
[  682.198106][T17656]  ? __fget_files+0x215/0x3d0
[  682.198124][T17656]  ? __fget_files+0x21f/0x3d0
[  682.198148][T17656]  security_file_ioctl+0xd3/0x230
[  682.198167][T17656]  __x64_sys_ioctl+0xb7/0x210
[  682.198186][T17656]  do_syscall_64+0xc9/0xf80
[  682.198206][T17656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.198222][T17656] RIP: 0033:0x7fd95359acb9
[  682.198236][T17656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.198249][T17656] RSP: 002b:00007fd954381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  682.198260][T17656] RAX: ffffffffffffffda RBX: 00007fd953815fa0 RCX: 00007fd95359acb9
[  682.198267][T17656] RDX: 0000200000000040 RSI: 0000000040384708 RDI: 0000000000000003
[  682.198274][T17656] RBP: 00007fd954381090 R08: 0000000000000000 R09: 0000000000000000
[  682.198281][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.198287][T17656] R13: 00007fd953816038 R14: 00007fd953815fa0 R15: 00007ffc3785dad8
[  682.198307][T17656]  </TASK>
[  682.198324][T17656] ERROR: Out of memory at tomoyo_realpath_from_path.
[  682.798187][T17660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  682.924692][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  683.614096][ T5881] usb 1-1: USB disconnect, device number 35
[  683.914070][    T9] usb 2-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config
[  684.220518][   T24] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  684.337668][   T24] cdc_ncm 4-1:1.0: bind() failure
[  684.353141][    T9] usb 2-1: config 93 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  684.366447][    T9] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  684.375642][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.395718][    T9] usbhid 2-1:93.0: couldn't find an input interrupt endpoint
[  684.443572][   T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  684.445730][T17666] ntfs3(loop0): try to read out of volume at offset 0x0
[  684.500711][   T24] cdc_ncm 4-1:1.1: bind() failure
[  684.544746][   T24] usb 4-1: USB disconnect, device number 37
[  684.744543][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3716'.
[  685.006727][ T5881] usb 2-1: USB disconnect, device number 44
[  686.671931][T17700] FAULT_INJECTION: forcing a failure.
[  686.671931][T17700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  686.724964][T17700] CPU: 1 UID: 0 PID: 17700 Comm: syz.3.3725 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  686.724996][T17700] Tainted: [L]=SOFTLOCKUP
[  686.725003][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  686.725013][T17700] Call Trace:
[  686.725020][T17700]  <TASK>
[  686.725028][T17700]  dump_stack_lvl+0x100/0x190
[  686.725058][T17700]  should_fail_ex.cold+0x5/0xa
[  686.725089][T17700]  _copy_to_user+0x32/0xd0
[  686.725116][T17700]  simple_read_from_buffer+0xcb/0x170
[  686.725139][T17700]  proc_fail_nth_read+0x1af/0x230
[  686.725164][T17700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  686.725190][T17700]  ? rw_verify_area+0xce/0x6d0
[  686.725207][T17700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  686.725231][T17700]  vfs_read+0x1e4/0xb30
[  686.725253][T17700]  ? __pfx_vfs_read+0x10/0x10
[  686.725269][T17700]  ? find_held_lock+0x2b/0x80
[  686.725294][T17700]  ? __fget_files+0x215/0x3d0
[  686.725320][T17700]  ? __fget_files+0x21f/0x3d0
[  686.725348][T17700]  ksys_read+0x12a/0x250
[  686.725367][T17700]  ? __pfx_ksys_read+0x10/0x10
[  686.725387][T17700]  ? fput+0x79/0x100
[  686.725415][T17700]  do_syscall_64+0xc9/0xf80
[  686.725437][T17700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.725456][T17700] RIP: 0033:0x7fa5fad5b58e
[  686.725471][T17700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  686.725487][T17700] RSP: 002b:00007fa5fbccffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  686.725510][T17700] RAX: ffffffffffffffda RBX: 00007fa5fbcd06c0 RCX: 00007fa5fad5b58e
[  686.725522][T17700] RDX: 000000000000000f RSI: 00007fa5fbcd00a0 RDI: 0000000000000004
[  686.725532][T17700] RBP: 00007fa5fbcd0090 R08: 0000000000000000 R09: 0000000000000000
[  686.725543][T17700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.725553][T17700] R13: 00007fa5fb016038 R14: 00007fa5fb015fa0 R15: 00007fff7c786198
[  686.725578][T17700]  </TASK>
[  686.981371][T17701] gfs2: error -5 reading superblock
[  687.094601][ T5881] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  687.279406][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.290548][ T5881] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  687.332187][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.364441][ T5881] usb 2-1: config 0 descriptor??
[  687.487024][T17708] sp0: Synchronizing with TNC
[  687.524725][   T48] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  688.998073][ T5881] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor
[  689.026506][ T5881] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0015/input/input24
[  689.784884][ T5881] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  689.893879][ T5881] usb 2-1: USB disconnect, device number 45
[  689.909427][   T48] usb 3-1: device descriptor read/all, error -71
[  690.486264][    T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  690.733670][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  691.001976][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  691.012091][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00
[  691.021644][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  691.036036][    T9] usb 5-1: SerialNumber: syz
[  691.063086][    T9] usb 5-1: 0:2 : does not exist
[  691.504756][   T30] audit: type=1326 audit(1769352334.523:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.2.3741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd95359acb9 code=0x0
[  691.525562][    T9] usb 5-1: USB disconnect, device number 54
[  693.401645][ T5881] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  693.606248][ T5881] usb 4-1: Using ep0 maxpacket: 32
[  693.612628][ T5881] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  693.622165][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.667342][ T5881] usb 4-1: config 0 descriptor??
[  693.736536][ T5881] as10x_usb: device has been detected
[  693.752212][ T5881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  693.840616][ T5881] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  694.230293][   T30] audit: type=1400 audit(1769352337.124:3580): avc:  denied  { map } for  pid=17789 comm="syz.2.3749" path="socket:[58381]" dev="sockfs" ino=58381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  694.243133][ T5881] as10x_usb: error during firmware upload part1
[  694.343057][ T5881] Registered device nBox DVB-T Dongle
[  694.498659][   T30] audit: type=1400 audit(1769352337.124:3581): avc:  denied  { read accept } for  pid=17789 comm="syz.2.3749" path="socket:[58381]" dev="sockfs" ino=58381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  694.579903][ T5881] usb 4-1: USB disconnect, device number 38
[  694.636941][ T5881] Unregistered device nBox DVB-T Dongle
[  694.654499][ T5881] as10x_usb: device has been disconnected
[  695.109268][T17806] Malformed UNC in devname
[  695.109268][T17806] 
[  695.115990][T17806] CIFS: VFS: Malformed UNC in devname
[  695.547335][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'.
[  695.898292][T17811] syzkaller0: entered promiscuous mode
[  695.916920][T17811] syzkaller0: entered allmulticast mode
[  696.326915][   T30] audit: type=1400 audit(1769352339.051:3582): avc:  denied  { read } for  pid=17812 comm="syz.0.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  696.417462][T17826] bpf: Bad value for 'mode'
[  696.438201][   T30] audit: type=1400 audit(1769352339.079:3583): avc:  denied  { write } for  pid=17820 comm="syz.2.3757" lport=59772 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  696.555250][T17832] tipc: Failed to remove unknown binding: 66,0,0/0:3434898032/3434898033
[  696.575188][T17832] tipc: Failed to remove unknown binding: 66,0,0/0:3434898032/3434898033
[  697.004332][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  697.172262][T17850] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3762'.
[  697.181692][T17850] 0·: renamed from hsr0 (while UP)
[  697.193042][T17850] 0·: entered allmulticast mode
[  697.198124][T17850] hsr_slave_0: entered allmulticast mode
[  697.203961][T17850] hsr_slave_1: entered allmulticast mode
[  697.213892][T17850] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  697.458122][T17856] Malformed UNC in devname
[  697.458122][T17856] 
[  697.464861][T17856] CIFS: VFS: Malformed UNC in devname
[  697.629434][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.641097][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.666009][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  697.704449][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  697.726037][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.767105][T17861] netlink: 'syz.4.3765': attribute type 1 has an invalid length.
[  697.767890][    T9] usb 4-1: config 0 descriptor??
[  697.897106][T17861] 8021q: adding VLAN 0 to HW filter on device bond1
[  697.930583][T17864] bond1: (slave veth3): Enslaving as an active interface with an up link
[  697.950655][T17861] vlan2: entered allmulticast mode
[  697.955925][T17861] bond_slave_1: entered allmulticast mode
[  697.962092][T17861] bond_slave_1: entered promiscuous mode
[  697.970226][T17861] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  698.063003][T17869] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3767'.
[  698.107185][T17870] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3766'.
[  698.215857][    T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  698.215889][    T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  698.215912][    T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  698.215935][    T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  698.216016][    T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  698.219505][    T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  698.225895][    T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  698.428350][T17875] erofs (device nbd4): cannot find valid erofs superblock
[  698.468023][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3768'.
[  698.795454][   T30] audit: type=1400 audit(1769352341.399:3584): avc:  denied  { ioctl } for  pid=17881 comm="syz.0.3770" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7a4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  698.867025][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'.
[  698.980114][T17887] FAULT_INJECTION: forcing a failure.
[  698.980114][T17887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.980181][T17887] CPU: 0 UID: 0 PID: 17887 Comm: syz.0.3772 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  698.980210][T17887] Tainted: [L]=SOFTLOCKUP
[  698.980216][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  698.980225][T17887] Call Trace:
[  698.980230][T17887]  <TASK>
[  698.980237][T17887]  dump_stack_lvl+0x100/0x190
[  698.980263][T17887]  should_fail_ex.cold+0x5/0xa
[  698.980292][T17887]  _copy_to_user+0x32/0xd0
[  698.980315][T17887]  simple_read_from_buffer+0xcb/0x170
[  698.980334][T17887]  proc_fail_nth_read+0x1af/0x230
[  698.980351][T17887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  698.980366][T17887]  ? rw_verify_area+0xce/0x6d0
[  698.980377][T17887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  698.980392][T17887]  vfs_read+0x1e4/0xb30
[  698.980404][T17887]  ? lockdep_hardirqs_on+0x78/0x100
[  698.980416][T17887]  ? __pfx_vfs_read+0x10/0x10
[  698.980432][T17887]  ? fdget_pos+0x2aa/0x380
[  698.980450][T17887]  ksys_read+0x12a/0x250
[  698.980462][T17887]  ? __pfx_ksys_read+0x10/0x10
[  698.980474][T17887]  ? fput+0x79/0x100
[  698.980491][T17887]  do_syscall_64+0xc9/0xf80
[  698.980504][T17887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.980515][T17887] RIP: 0033:0x7f8ca855b58e
[  698.980524][T17887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  698.980536][T17887] RSP: 002b:00007f8ca9513fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  698.980547][T17887] RAX: ffffffffffffffda RBX: 00007f8ca95146c0 RCX: 00007f8ca855b58e
[  698.980554][T17887] RDX: 000000000000000f RSI: 00007f8ca95140a0 RDI: 0000000000000006
[  698.980561][T17887] RBP: 00007f8ca9514090 R08: 0000000000000000 R09: 0000000000000000
[  698.980568][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.980574][T17887] R13: 00007f8ca8816128 R14: 00007f8ca8816090 R15: 00007ffdc7237be8
[  698.980589][T17887]  </TASK>
[  699.419179][ T5867] IPVS: starting estimator thread 0...
[  699.505801][T17894] IPVS: using max 44 ests per chain, 105600 per kthread
[  699.543379][   T30] audit: type=1400 audit(1769352342.091:3585): avc:  denied  { write } for  pid=17890 comm="syz.0.3774" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  699.546894][   T30] audit: type=1400 audit(1769352342.091:3586): avc:  denied  { ioctl } for  pid=17890 comm="syz.0.3774" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  699.634846][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  699.634919][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  700.029786][T14516] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  700.413571][T14516] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  700.413601][T14516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.413619][T14516] usb 5-1: Product: syz
[  700.413635][T14516] usb 5-1: Manufacturer: syz
[  700.413651][T14516] usb 5-1: SerialNumber: syz
[  700.421318][    T9] usb 4-1: USB disconnect, device number 39
[  700.745923][T17903] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3776'.
[  700.773534][T17903] 
: renamed from bond_slave_0
[  700.893324][   T30] audit: type=1400 audit(1769352343.316:3587): avc:  denied  { bind } for  pid=17900 comm="syz.3.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  701.455472][T14516] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  701.600812][T17910] netlink: 'syz.0.3778': attribute type 1 has an invalid length.
[  701.707899][   T30] audit: type=1326 audit(1769352344.111:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17913 comm="syz.1.3779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff42f59acb9 code=0x0
[  701.725562][T17910] 8021q: adding VLAN 0 to HW filter on device bond1
[  702.472044][T17914] bond1: (slave veth3): Enslaving as an active interface with an up link
[  702.666924][T17910] vlan2: entered allmulticast mode
[  702.678336][T17910] bond_slave_1: entered promiscuous mode
[  703.125400][T17910] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  703.265063][   T30] audit: type=1400 audit(1769352345.580:3589): avc:  denied  { connect } for  pid=17939 comm="syz.0.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  703.296751][T17937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17937 comm=syz.1.3781
[  703.299047][T17937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3781'.
[  703.370703][T13868] usb 5-1: USB disconnect, device number 55
[  703.415135][T17946] Bluetooth: MGMT ver 1.23
[  703.702917][T17957] NILFS (loop3): device size too small
[  703.905285][T17960] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  704.326885][T13868] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  704.389530][   T30] audit: type=1400 audit(1769352346.627:3590): avc:  denied  { read } for  pid=17956 comm="syz.1.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  704.442924][   T24] kernel read not supported for file /396/status (pid: 24 comm: kworker/1:0)
[  704.454494][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'.
[  704.524672][T13868] usb 5-1: unable to get BOS descriptor or descriptor too short
[  704.525117][T13868] usb 5-1: not running at top speed; connect to a high speed hub
[  704.525963][T13868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  704.525985][T13868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  704.548073][T13868] usb 5-1: string descriptor 0 read error: -22
[  704.572617][T13868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  704.573766][T13868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.588899][T13868] usb 5-1: 0:2 : does not exist
[  705.012630][T17979] vxcan1: entered promiscuous mode
[  705.015080][T17979] team0: Device vxcan1 is of different type
[  707.369267][T13868] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  707.412626][T13868] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  707.421390][ T5874] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[  707.645660][T13868] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  707.834741][ T5874] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  707.873056][ T5874] usb 4-1: config 179 has no interface number 0
[  707.884440][T13868] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  707.905919][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  707.929249][T13868] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  707.994243][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  708.020248][T13868] usb 5-1: USB disconnect, device number 56
[  708.479877][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  708.496657][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  708.510562][ T5874] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  708.524138][ T5874] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  708.593897][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.771195][T18015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18015 comm=syz.2.3796
[  708.793646][T18015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3796'.
[  709.250212][T17994] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  709.284483][ T5874] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  709.668677][ T5874] xpad 4-1:179.65: probe with driver xpad failed with error -90
[  709.984576][T18034] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  709.993567][T18034] overlayfs: overlapping lowerdir path
[  710.691001][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'.
[  711.915990][T14516] usb 4-1: USB disconnect, device number 40
[  712.120747][ T5867] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  712.368287][ T5867] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  712.394457][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.434076][ T5867] usb 5-1: config 0 has no interface number 0
[  712.440951][ T5867] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  712.462351][ T5867] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  712.557903][ T5874] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  712.560853][T18070] IPv6: NLM_F_REPLACE set, but no existing node found!
[  712.589422][ T5867] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  712.600975][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.807975][T18072] kernel read not supported for file /eth0 (pid: 18072 comm: syz.0.3805)
[  712.823386][ T5867] usb 5-1: Product: syz
[  712.834162][ T5867] usb 5-1: Manufacturer: syz
[  712.839054][   T30] audit: type=1800 audit(1769352354.541:3591): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3805" name="eth0" dev="mqueue" ino=59945 res=0 errno=0
[  712.851481][ T5867] usb 5-1: SerialNumber: syz
[  712.877208][ T5867] usb 5-1: config 0 descriptor??
[  712.967092][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  712.977691][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  712.989877][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  713.008055][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  713.021499][ T5874] usb 4-1: SerialNumber: syz
[  713.053986][ T5874] usb 4-1: 0:2 : does not exist
[  713.110367][T13868] usb 5-1: USB disconnect, device number 57
[  713.748505][T18066] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  714.342781][ T5874] usb 4-1: USB disconnect, device number 41
[  714.451335][T13868] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  714.637015][T13868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.679439][T13868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  714.763715][T18091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18091 comm=syz.2.3810
[  714.782995][T13868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  714.821874][T13868] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  714.832431][T18091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3810'.
[  714.845886][   T30] audit: type=1400 audit(1769352356.412:3592): avc:  denied  { remove_name } for  pid=18095 comm="syz.0.3812" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  714.880228][T13868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.042464][T13868] usb 2-1: config 0 descriptor??
[  715.048080][   T30] audit: type=1400 audit(1769352356.412:3593): avc:  denied  { unlink } for  pid=18095 comm="syz.0.3812" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  715.424274][ T5874] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  715.493533][T18111] IPv6: NLM_F_CREATE should be specified when creating new route
[  715.518743][T13868] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  715.528144][T13868] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  715.539076][T13868] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  715.550146][T13868] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  715.567838][T13868] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  715.621268][ T5874] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  715.636034][ T5874] usb 4-1: config 0 has no interface number 0
[  715.653621][ T5874] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  715.665683][ T5874] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  715.677315][ T5874] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  715.705127][ T5874] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  715.719817][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  715.731259][ T5874] usb 4-1: Product: syz
[  716.005931][T18129] FAULT_INJECTION: forcing a failure.
[  716.005931][T18129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  716.039247][T18129] CPU: 0 UID: 0 PID: 18129 Comm: syz.4.3820 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.039280][T18129] Tainted: [L]=SOFTLOCKUP
[  716.039286][T18129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  716.039297][T18129] Call Trace:
[  716.039303][T18129]  <TASK>
[  716.039311][T18129]  dump_stack_lvl+0x100/0x190
[  716.039338][T18129]  should_fail_ex.cold+0x5/0xa
[  716.039370][T18129]  _copy_from_user+0x2e/0xd0
[  716.039395][T18129]  copy_msghdr_from_user+0x9f/0x4f0
[  716.039416][T18129]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  716.039446][T18129]  ___sys_sendmsg+0x106/0x1e0
[  716.039467][T18129]  ? __pfx____sys_sendmsg+0x10/0x10
[  716.039497][T18129]  ? find_held_lock+0x2b/0x80
[  716.039537][T18129]  __sys_sendmsg+0x170/0x220
[  716.039561][T18129]  ? __pfx___sys_sendmsg+0x10/0x10
[  716.039601][T18129]  do_syscall_64+0xc9/0xf80
[  716.039624][T18129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.039642][T18129] RIP: 0033:0x7f93e859acb9
[  716.039657][T18129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.039675][T18129] RSP: 002b:00007f93e67f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  716.039694][T18129] RAX: ffffffffffffffda RBX: 00007f93e8815fa0 RCX: 00007f93e859acb9
[  716.039706][T18129] RDX: 00000000000080c0 RSI: 00002000000004c0 RDI: 0000000000000005
[  716.039717][T18129] RBP: 00007f93e67f6090 R08: 0000000000000000 R09: 0000000000000000
[  716.039729][T18129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.039739][T18129] R13: 00007f93e8816038 R14: 00007f93e8815fa0 R15: 00007ffe1391d828
[  716.039765][T18129]  </TASK>
[  716.231873][   T30] audit: type=1400 audit(1769352357.244:3594): avc:  denied  { create } for  pid=18118 comm="syz.0.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  716.254812][ T5874] usb 4-1: SerialNumber: syz
[  716.314206][ T5874] usb 4-1: config 0 descriptor??
[  716.343251][ T5874] cm109 4-1:0.8: invalid payload size 0, expected 4
[  716.360900][ T5874] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input25
[  716.433188][ T5874] ------------[ cut here ]------------
[  716.433243][ T5874] URB ffff888034530e00 submitted while active
[  716.433257][ T5874] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15fa/0x1910, CPU#1: kworker/1:4/5874
[  716.433314][ T5874] Modules linked in:
[  716.433360][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.433389][ T5874] Tainted: [L]=SOFTLOCKUP
[  716.433399][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  716.433415][ T5874] Workqueue: usb_hub_wq hub_event
[  716.433468][ T5874] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  716.433487][ T5874] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 0d fe c8 fa 48 8d 3d 46 d7 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  716.433507][ T5874] RSP: 0018:ffffc900031c6de8 EFLAGS: 00010287
[  716.433525][ T5874] RAX: 0000000000056afc RBX: ffff888034530e00 RCX: ffffc90018fb0000
[  716.433539][ T5874] RDX: 0000000000100000 RSI: ffff888034530e00 RDI: ffffffff90c3d4a0
[  716.433554][ T5874] RBP: ffff888032d2a140 R08: 0000000000000000 R09: fffffbfff216e97a
[  716.433568][ T5874] R10: ffffc900031c6e70 R11: 00000000000075a9 R12: ffff88807c8fc8a0
[  716.433602][ T5874] R13: ffff88807c8fc810 R14: ffff88807c8fc89f R15: ffff88807c8fc850
[  716.433617][ T5874] FS:  0000000000000000(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000
[  716.433636][ T5874] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  716.433650][ T5874] CR2: 0000200000002000 CR3: 000000007baf7000 CR4: 00000000003526f0
[  716.433664][ T5874] Call Trace:
[  716.433672][ T5874]  <TASK>
[  716.433684][ T5874]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  716.433714][ T5874]  cm109_input_open+0x27a/0x450
[  716.433767][ T5874]  ? __pfx_cm109_input_open+0x10/0x10
[  716.433789][ T5874]  input_open_device+0x24c/0x3e0
[  716.433823][ T5874]  kbd_connect+0x124/0x180
[  716.433859][ T5874]  input_attach_handler.isra.0+0x177/0x1e0
[  716.433914][ T5874]  input_register_device.cold+0x139/0x375
[  716.433944][ T5874]  cm109_usb_probe+0x128d/0x17f0
[  716.433979][ T5874]  usb_probe_interface+0x303/0x8f0
[  716.434009][ T5874]  ? __pfx_usb_probe_interface+0x10/0x10
[  716.434055][ T5874]  really_probe+0x241/0xa60
[  716.434078][ T5874]  __driver_probe_device+0x1de/0x400
[  716.434102][ T5874]  driver_probe_device+0x4c/0x1b0
[  716.434125][ T5874]  __device_attach_driver+0x1df/0x340
[  716.434149][ T5874]  ? __pfx___device_attach_driver+0x10/0x10
[  716.434194][ T5874]  bus_for_each_drv+0x159/0x1e0
[  716.434222][ T5874]  ? __pfx_bus_for_each_drv+0x10/0x10
[  716.434252][ T5874]  ? lockdep_hardirqs_on+0x78/0x100
[  716.434274][ T5874]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  716.434339][ T5874]  __device_attach+0x1e4/0x4d0
[  716.434362][ T5874]  ? __pfx___device_attach+0x10/0x10
[  716.434385][ T5874]  ? do_raw_spin_unlock+0x145/0x1e0
[  716.434415][ T5874]  device_initial_probe+0xaf/0xd0
[  716.434438][ T5874]  bus_probe_device+0x64/0x160
[  716.434489][ T5874]  device_add+0x11d9/0x1950
[  716.434515][ T5874]  ? __pfx_device_add+0x10/0x10
[  716.434539][ T5874]  ? mark_held_locks+0x40/0x70
[  716.434567][ T5874]  usb_set_configuration+0xd97/0x1c60
[  716.434635][ T5874]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  716.434653][ T5874]  usb_generic_driver_probe+0xa1/0xe0
[  716.434673][ T5874]  usb_probe_device+0xef/0x400
[  716.434697][ T5874]  ? __pfx_usb_probe_device+0x10/0x10
[  716.434722][ T5874]  really_probe+0x241/0xa60
[  716.434771][ T5874]  __driver_probe_device+0x1de/0x400
[  716.434791][ T5874]  ? usb_driver_applicable+0x1c7/0x220
[  716.434842][ T5874]  driver_probe_device+0x4c/0x1b0
[  716.434867][ T5874]  __device_attach_driver+0x1df/0x340
[  716.434893][ T5874]  ? __pfx___device_attach_driver+0x10/0x10
[  716.434934][ T5874]  bus_for_each_drv+0x159/0x1e0
[  716.434963][ T5874]  ? __pfx_bus_for_each_drv+0x10/0x10
[  716.434993][ T5874]  ? lockdep_hardirqs_on+0x78/0x100
[  716.435014][ T5874]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  716.435039][ T5874]  __device_attach+0x1e4/0x4d0
[  716.435079][ T5874]  ? __pfx___device_attach+0x10/0x10
[  716.435101][ T5874]  ? do_raw_spin_unlock+0x145/0x1e0
[  716.435131][ T5874]  device_initial_probe+0xaf/0xd0
[  716.435154][ T5874]  bus_probe_device+0x64/0x160
[  716.435189][ T5874]  device_add+0x11d9/0x1950
[  716.435234][ T5874]  ? __pfx_device_add+0x10/0x10
[  716.435257][ T5874]  ? add_device_randomness+0xb7/0xf0
[  716.435296][ T5874]  usb_new_device.cold+0x685/0x115c
[  716.435322][ T5874]  ? do_raw_spin_lock+0x128/0x260
[  716.435345][ T5874]  ? __pfx_usb_new_device+0x10/0x10
[  716.435386][ T5874]  ? mark_held_locks+0x40/0x70
[  716.435412][ T5874]  hub_event+0x314d/0x4af0
[  716.435460][ T5874]  ? __pfx_hub_event+0x10/0x10
[  716.435495][ T5874]  ? process_one_work+0x80b/0x1840
[  716.435538][ T5874]  ? rcu_is_watching+0x12/0xc0
[  716.435569][ T5874]  process_one_work+0x9c2/0x1840
[  716.435603][ T5874]  ? __pfx_process_one_work+0x10/0x10
[  716.435634][ T5874]  ? assign_work+0x19c/0x250
[  716.435683][ T5874]  worker_thread+0x5da/0xe40
[  716.435733][ T5874]  ? kthread+0x17d/0x730
[  716.435754][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  716.435775][ T5874]  kthread+0x3b3/0x730
[  716.435822][ T5874]  ? __pfx_kthread+0x10/0x10
[  716.435850][ T5874]  ? ret_from_fork+0x79/0xaf0
[  716.435891][ T5874]  ? ret_from_fork+0x79/0xaf0
[  716.435917][ T5874]  ? rcu_is_watching+0x12/0xc0
[  716.435943][ T5874]  ? __pfx_kthread+0x10/0x10
[  716.435986][ T5874]  ret_from_fork+0x754/0xaf0
[  716.436011][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  716.436037][ T5874]  ? __switch_to+0x7b9/0x10c0
[  716.436063][ T5874]  ? __pfx_kthread+0x10/0x10
[  716.436084][ T5874]  ret_from_fork_asm+0x1a/0x30
[  716.436140][ T5874]  </TASK>
[  716.436152][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  716.436168][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.436194][ T5874] Tainted: [L]=SOFTLOCKUP
[  716.436202][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  716.436214][ T5874] Workqueue: usb_hub_wq hub_event
[  716.436237][ T5874] Call Trace:
[  716.436247][ T5874]  <TASK>
[  716.436256][ T5874]  dump_stack_lvl+0x100/0x190
[  716.436281][ T5874]  vpanic+0x20d/0x630
[  716.436300][ T5874]  panic+0xd1/0xd1
[  716.436319][ T5874]  ? __pfx_panic+0x10/0x10
[  716.436350][ T5874]  check_panic_on_warn.cold+0x19/0x34
[  716.436372][ T5874]  ? usb_submit_urb+0x15fa/0x1910
[  716.436388][ T5874]  __warn.cold+0x191/0x2f8
[  716.436411][ T5874]  __report_bug+0x296/0x3d0
[  716.436430][ T5874]  ? usb_submit_urb+0x15fa/0x1910
[  716.436449][ T5874]  ? __pfx___report_bug+0x10/0x10
[  716.436475][ T5874]  ? preempt_schedule_common+0x42/0xc0
[  716.436496][ T5874]  ? preempt_schedule_thunk+0x16/0x30
[  716.436522][ T5874]  report_bug_entry+0xe1/0x290
[  716.436540][ T5874]  ? usb_submit_urb+0x15fd/0x1910
[  716.436558][ T5874]  handle_bug+0x1c9/0x2a0
[  716.436581][ T5874]  exc_invalid_op+0x17/0x50
[  716.436605][ T5874]  asm_exc_invalid_op+0x1a/0x20
[  716.436624][ T5874] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  716.436643][ T5874] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 0d fe c8 fa 48 8d 3d 46 d7 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  716.436660][ T5874] RSP: 0018:ffffc900031c6de8 EFLAGS: 00010287
[  716.436675][ T5874] RAX: 0000000000056afc RBX: ffff888034530e00 RCX: ffffc90018fb0000
[  716.436688][ T5874] RDX: 0000000000100000 RSI: ffff888034530e00 RDI: ffffffff90c3d4a0
[  716.436700][ T5874] RBP: ffff888032d2a140 R08: 0000000000000000 R09: fffffbfff216e97a
[  716.436712][ T5874] R10: ffffc900031c6e70 R11: 00000000000075a9 R12: ffff88807c8fc8a0
[  716.436725][ T5874] R13: ffff88807c8fc810 R14: ffff88807c8fc89f R15: ffff88807c8fc850
[  716.436751][ T5874]  ? usb_submit_urb+0x15f3/0x1910
[  716.436770][ T5874]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  716.436795][ T5874]  cm109_input_open+0x27a/0x450
[  716.436815][ T5874]  ? __pfx_cm109_input_open+0x10/0x10
[  716.436843][ T5874]  input_open_device+0x24c/0x3e0
[  716.436876][ T5874]  kbd_connect+0x124/0x180
[  716.436902][ T5874]  input_attach_handler.isra.0+0x177/0x1e0
[  716.436928][ T5874]  input_register_device.cold+0x139/0x375
[  716.436954][ T5874]  cm109_usb_probe+0x128d/0x17f0
[  716.436984][ T5874]  usb_probe_interface+0x303/0x8f0
[  716.437012][ T5874]  ? __pfx_usb_probe_interface+0x10/0x10
[  716.437038][ T5874]  really_probe+0x241/0xa60
[  716.437060][ T5874]  __driver_probe_device+0x1de/0x400
[  716.437082][ T5874]  driver_probe_device+0x4c/0x1b0
[  716.437103][ T5874]  __device_attach_driver+0x1df/0x340
[  716.437123][ T5874]  ? __pfx___device_attach_driver+0x10/0x10
[  716.437142][ T5874]  bus_for_each_drv+0x159/0x1e0
[  716.437169][ T5874]  ? __pfx_bus_for_each_drv+0x10/0x10
[  716.437195][ T5874]  ? lockdep_hardirqs_on+0x78/0x100
[  716.437215][ T5874]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  716.437238][ T5874]  __device_attach+0x1e4/0x4d0
[  716.437257][ T5874]  ? __pfx___device_attach+0x10/0x10
[  716.437278][ T5874]  ? do_raw_spin_unlock+0x145/0x1e0
[  716.437305][ T5874]  device_initial_probe+0xaf/0xd0
[  716.437325][ T5874]  bus_probe_device+0x64/0x160
[  716.437356][ T5874]  device_add+0x11d9/0x1950
[  716.437380][ T5874]  ? __pfx_device_add+0x10/0x10
[  716.437402][ T5874]  ? mark_held_locks+0x40/0x70
[  716.437430][ T5874]  usb_set_configuration+0xd97/0x1c60
[  716.437469][ T5874]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  716.437487][ T5874]  usb_generic_driver_probe+0xa1/0xe0
[  716.437505][ T5874]  usb_probe_device+0xef/0x400
[  716.437525][ T5874]  ? __pfx_usb_probe_device+0x10/0x10
[  716.437545][ T5874]  really_probe+0x241/0xa60
[  716.437567][ T5874]  __driver_probe_device+0x1de/0x400
[  716.437585][ T5874]  ? usb_driver_applicable+0x1c7/0x220
[  716.437610][ T5874]  driver_probe_device+0x4c/0x1b0
[  716.437629][ T5874]  __device_attach_driver+0x1df/0x340
[  716.437643][ T5874]  ? __pfx___device_attach_driver+0x10/0x10
[  716.437655][ T5874]  bus_for_each_drv+0x159/0x1e0
[  716.437672][ T5874]  ? __pfx_bus_for_each_drv+0x10/0x10
[  716.437689][ T5874]  ? lockdep_hardirqs_on+0x78/0x100
[  716.437708][ T5874]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  716.437729][ T5874]  __device_attach+0x1e4/0x4d0
[  716.437748][ T5874]  ? __pfx___device_attach+0x10/0x10
[  716.437768][ T5874]  ? do_raw_spin_unlock+0x145/0x1e0
[  716.437787][ T5874]  device_initial_probe+0xaf/0xd0
[  716.437800][ T5874]  bus_probe_device+0x64/0x160
[  716.437818][ T5874]  device_add+0x11d9/0x1950
[  716.437844][ T5874]  ? __pfx_device_add+0x10/0x10
[  716.437869][ T5874]  ? add_device_randomness+0xb7/0xf0
[  716.437907][ T5874]  usb_new_device.cold+0x685/0x115c
[  716.437926][ T5874]  ? do_raw_spin_lock+0x128/0x260
[  716.437941][ T5874]  ? __pfx_usb_new_device+0x10/0x10
[  716.437955][ T5874]  ? mark_held_locks+0x40/0x70
[  716.437969][ T5874]  hub_event+0x314d/0x4af0
[  716.438009][ T5874]  ? __pfx_hub_event+0x10/0x10
[  716.438039][ T5874]  ? process_one_work+0x80b/0x1840
[  716.438060][ T5874]  ? rcu_is_watching+0x12/0xc0
[  716.438081][ T5874]  process_one_work+0x9c2/0x1840
[  716.438101][ T5874]  ? __pfx_process_one_work+0x10/0x10
[  716.438119][ T5874]  ? assign_work+0x19c/0x250
[  716.438137][ T5874]  worker_thread+0x5da/0xe40
[  716.438169][ T5874]  ? kthread+0x17d/0x730
[  716.438186][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  716.438204][ T5874]  kthread+0x3b3/0x730
[  716.438223][ T5874]  ? __pfx_kthread+0x10/0x10
[  716.438234][ T5874]  ? ret_from_fork+0x79/0xaf0
[  716.438247][ T5874]  ? ret_from_fork+0x79/0xaf0
[  716.438261][ T5874]  ? rcu_is_watching+0x12/0xc0
[  716.438279][ T5874]  ? __pfx_kthread+0x10/0x10
[  716.438299][ T5874]  ret_from_fork+0x754/0xaf0
[  716.438321][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  716.438343][ T5874]  ? __switch_to+0x7b9/0x10c0
[  716.438363][ T5874]  ? __pfx_kthread+0x10/0x10
[  716.438377][ T5874]  ret_from_fork_asm+0x1a/0x30
[  716.438395][ T5874]  </TASK>
[  716.438676][ T5874] Kernel Offset: disabled